CVE-2026-119484
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
The Photo Gallery by Supsystic plugin for WordPress (up to version 1.21.6) is vulnerable to Cross-Site Request Forgery (CSRF), allowing unwanted actions on behalf of a logged-in user.
Risk Assessment
An attacker could trick an administrator into performing unintended operations in the gallery, potentially leading to data modification or loss.
Recommendation
Update the Photo Gallery by Supsystic plugin to the latest version and consider implementing additional anti-CSRF protections.
Other vulnerabilities in Photo Gallery by Supsystic
See all- CVE-2026-102399Medium
Unauthenticated Cross Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic versions up to 1.21.0. Allows an attacker to perform unauthorized actions on behalf of a logged-in user.
- CVE-2026-24628Medium
The Photo Gallery by Supsystic plugin versions up to 1.16.3 contain a Cross-Site Scripting (XSS) vulnerability, allowing administrators to inject malicious scripts into pages.
Original NVD description (English source)
Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Photo Gallery by Supsystic gallery-by-supsystic allows Cross Site Request Forgery.This issue affects Photo Gallery by Supsystic: from n/a through 1.21.6.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS