Skip to content
OpenAdvisories
High · 7.1 CVE-2025-49394 EUVD-2025-38011GHSA-mrv4-5c7q-v4v8

WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 1.0.7 - Broken Authentication vulnerability

Published Nov 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album. 3d-image-gallery allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Image Gallery block – Create and display photo gallery/photo album.: from n/a through <= 1.0.7.

Affected products

VendorProductAffectedFixed
bPlugins Image Gallery block – Create and display photo gallery/photo album. ≤ 1.0.7 —

References