Unknown Photo Gallery, Sliders, Proofing And Themes vulnerabilities

5 CVEs affecting Unknown Photo Gallery, Sliders, Proofing And Themes, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-81654, published 2026-09-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-81650, published 2026-09-20. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a…
CVE-2026-81652, published 2026-09-20. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is entitled to a given image record before returning it, allowing users with the…
CVE-2026-81654, published 2026-09-20. Low severity, CVSS 3.1. EPSS: 0.2% chance of exploitation in the next 30 days. The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options capability before saving image sizing settings, allowing users granted only its…
CVE-2026-81651, published 2026-09-20. Low severity, CVSS 3.1. EPSS: 0.2% chance of exploitation in the next 30 days. The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user saving a gallery owns it, allowing any user granted its gallery-management capability by an…
CVE-2026-81653, published 2026-09-20. Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days. The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an image owns the gallery it belongs to, allowing users granted its gallery-management…