PatchSiren

Photo Gallery, Sliders, Proofing and WordPress plugin CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Photo Gallery, Sliders, Proofing and WordPress plugin CVE published 2026-09-20

CVE-2026-81654

The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options capability before saving image sizing settings, allowing users granted only its gallery-management capability by an administrator to change settings that apply across the whole site. This vulnerability allows users with limited capabilities to make site-wide changes, potentially impacting si [truncated]