CVE-2026-81650: CWE-434 Unrestricted Upload of File with Dangerous Type in Photo Gallery, Sliders, Proofing and Themes
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a loop counter so that the check always passes, allowing users granted its gallery-management capability by an administrator to write arbitrary files into a web-accessible directory and, on hosts that execute them, run arbitrary code.
AI Analysis
Technical Summary
The Photo Gallery, Sliders, Proofing and Themes WordPress plugin versions prior to 4.5.0 contain a CWE-434 vulnerability where the extension validation of files extracted from uploaded archives is bypassed. This occurs because a variable is reused as a loop counter, causing the validation check to always pass. As a result, users granted gallery-management permissions by an administrator can upload and write arbitrary files into web-accessible directories. On hosts that execute such files, this can lead to arbitrary code execution.
Potential Impact
Users with gallery-management capabilities can upload malicious files that bypass extension checks, allowing them to place arbitrary files in web-accessible locations. If the hosting environment executes these files, attackers can run arbitrary code, potentially compromising the server.
Mitigation Recommendations
Upgrade the Photo Gallery, Sliders, Proofing and Themes plugin to version 4.5.0 or later, where this vulnerability is fixed. No other mitigations are specified. Patch status is confirmed by the version boundary in the affectedVersions data.
CVE-2026-81650: CWE-434 Unrestricted Upload of File with Dangerous Type in Photo Gallery, Sliders, Proofing and Themes
Description
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a loop counter so that the check always passes, allowing users granted its gallery-management capability by an administrator to write arbitrary files into a web-accessible directory and, on hosts that execute them, run arbitrary code.
CVSS v3.1
Score 7.2high
Affected software
Photo Gallery, Sliders, Proofing and Themes
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Photo Gallery, Sliders, Proofing and Themes WordPress plugin versions prior to 4.5.0 contain a CWE-434 vulnerability where the extension validation of files extracted from uploaded archives is bypassed. This occurs because a variable is reused as a loop counter, causing the validation check to always pass. As a result, users granted gallery-management permissions by an administrator can upload and write arbitrary files into web-accessible directories. On hosts that execute such files, this can lead to arbitrary code execution.
Potential Impact
Users with gallery-management capabilities can upload malicious files that bypass extension checks, allowing them to place arbitrary files in web-accessible locations. If the hosting environment executes these files, attackers can run arbitrary code, potentially compromising the server.
Mitigation Recommendations
Upgrade the Photo Gallery, Sliders, Proofing and Themes plugin to version 4.5.0 or later, where this vulnerability is fixed. No other mitigations are specified. Patch status is confirmed by the version boundary in the affectedVersions data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WPScan
- Date Reserved
- 2026-08-27T09:27:24.690Z
- State
- PUBLISHED
Threat ID: 6aaf7de855bf5e2cf5adcf93
Added to database: 09/20/2026, 06:32:08 UTC
Last enriched: 09/20/2026, 06:47:42 UTC
Last updated: 09/20/2026, 22:12:34 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.