Remote Code Execution Vulnerability in NextGEN Gallery by Photocrati

CVE-2026-76010

What is CVE-2026-76010?

The NextGEN Gallery plugin for WordPress is susceptible to a Remote Code Execution vulnerability due to unrestricted mass assignment within the render_image function. This flaw arises from the allowance of arbitrary meta_data keys manipulation on the image model. Additionally, the vulnerability is exacerbated by inadequate realpath containment during path construction and a bypassable signature check within the public image delivery process. Authenticated attackers with custom-level access can exploit this vulnerability to execute arbitrary code on the server. Importantly, the access requirement allows any Subscriber who has ever possessed the 'NextGEN Manage gallery' capability to maintain potential exploitation indefinitely, as access rights are not effectively revoked.

References