Authorization Bypass in Contest Gallery Plugin for WordPress

CVE-2025-12849

What is CVE-2025-12849?

The Contest Gallery plugin for WordPress is exposed to an authorization bypass due to a flawed AJAX action registration. Specifically, the plugin's cg_check_wp_admin_upload_v10 action is available to both authenticated and unauthenticated users without requisite capability checks or nonce verification. As a result, this could enable unauthenticated attackers to inject arbitrary media attachments into galleries and manipulate gallery metadata through the AJAX action. However, this vulnerability does not allow for file movement or direct uploads.

References