Cevnitra
Cevnitra

Explore Cevnitra

Explore Cevnitra

Find the risk.
Focus the fix.

Bring your applications and infrastructure into focus.

Scan Now
Already have an account? Log in
All security reports
NVD security advisoryHigh

High advisory for The Photo Gallery

CVE-2026-76010 · Reported 31 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

The Photo GalleryAffected product

Advisory overview

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the render_image function. This is due to unrestricted mass assignment of caller-supplied meta_data keys onto the image model combined with missing realpath containment in path construction and a bypassable signature check on the public image delivery route. This makes it possible for authenticated attackers, with custom-level access and above, to execute code on the server. Exploitation requires the authenticated attacker to own at least one NextGEN gallery — a condition that can be satisfied by any Subscriber who was ever granted the 'NextGEN Manage gallery' capability, and that access is retained indefinitely due to the stored gallery-author equality fallback in _can_manage_gallery() even after the capability is revoked.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account