What’s Vulnerable › Products

Envira Gallery vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Envira Gallery version is affected

Latest Envira Gallery vulnerabilities

• CVE-2026-104684 — Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode (CVSS 2.7)
• CVE-2026-104682 — Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route (CVSS 2.7)
• CVE-2026-104681 — Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST Field (CVSS 2.7)
• CVE-2026-104680 — Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding Wizard (CVSS 7.2)
• CVE-2026-104653 — Envira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Crop Dimensions (CVSS 6.8)
• CVE-2026-104652 — Envira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Image ID (CVSS 6.8)