The vulnerability identified as CVE-2026-32330 is a CSRF issue in the 10Web Photo Gallery plugin for WordPress, affecting versions up to and including 1.8.37. CSRF vulnerabilities enable attackers to induce users to execute unwanted actions on a web application in which they are authenticated. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity, no privileges required, but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact.

An attacker could exploit this vulnerability to cause an authenticated user to perform unintended actions within the Photo Gallery plugin, potentially altering data or settings. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible, or limiting plugin usage to trusted environments. Monitor the vendor's communications for updates on patches or official mitigations.