{
 "id": "WPSEC-2026-1126",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1126/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1126/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1126/index.md",
 "title": "Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.5.2 - Authenticated (Author+) Insecure Direct Object Reference to Album Modification and Deletion via Lightroom and XML-RPC",
 "description": "The NextGEN Gallery plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.5.2 due to missing album ownership validation on the Lightroom album_edit/album_remove tasks and the XML-RPC album edit and delete methods. This makes it possible for authenticated attackers who have been granted the 'NextGEN Edit album' capability (such as delegated author-level users) to rename, modify, or permanently delete albums belonging to other users.",
 "plugin": {
  "slug": "nextgen-gallery",
  "name": "Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery",
  "full_name": "Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery",
  "wordpress_org": "https://wordpress.org/plugins/nextgen-gallery/",
  "advisories_url": "https://wpsec.com/vuln/plugin/nextgen-gallery/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/nextgen-gallery"
 },
 "type": "IDOR",
 "cwe": [
  "CWE-639"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.4,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "4.5.3",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 4.5.3"
  ]
 },
 "introduced_in": null,
 "fixed_in": "4.5.3",
 "remediation": "Update to 4.5.3 or later.",
 "fix_released": "2026-10-15T18:06:31+00:00",
 "published": "2026-10-16T18:43:17+00:00",
 "updated": "2026-10-16T09:49:46.155871+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1126/",
  "https://plugins.svn.wordpress.org/nextgen-gallery/tags/4.5.3/",
  "https://wordpress.org/plugins/nextgen-gallery/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/nextgen-gallery",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-10-16"
 }
}