UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-104079

Envira Gallery Lite < 1.16.2 Missing Authorization via Gallery Conversion REST Endpoint

Severity
Medium 5.3
Published
9 Oct 2026
Last changed
27 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
1.16.2
Sources
CVE Program

Affected software

SoftwareAffected versions
Envira Gallery Lite (WordPress plugin)WordPress plugins · wp-plugin:envira-gallery-lite
  • Every version before 1.16.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-104079