CVE-2026-102399
MediumCVSS 5.4Summary
Unauthenticated Cross Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic versions up to 1.21.0. Allows an attacker to perform unauthorized actions on behalf of a logged-in user.
Risk Assessment
CSRF attack can lead to unauthorized changes in gallery configuration, data deletion, or other harmful actions.
Recommendation
Update the Photo Gallery by Supsystic plugin to the latest patched version.
Other vulnerabilities in Photo Gallery by Supsystic
See all- CVE-2026-119484Medium
The Photo Gallery by Supsystic plugin for WordPress (up to version 1.21.6) is vulnerable to Cross-Site Request Forgery (CSRF), allowing unwanted actions on behalf of a logged-in user.
- CVE-2026-24628Medium
The Photo Gallery by Supsystic plugin versions up to 1.16.3 contain a Cross-Site Scripting (XSS) vulnerability, allowing administrators to inject malicious scripts into pages.
Original NVD description (English source)
Unauthenticated Cross Site Request Forgery (CSRF) in Photo Gallery by Supsystic <= 1.21.0 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS