nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-12849 CVE-2025-12849
MEDIUM
Contest Gallery <= 28.0.2 - Missing Authorization
Record summary
CVE-2025-12849 has a selected CVSS score of 5.3 (medium).
Description
The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.0.2. This is due to the plugin registering the `cg_check_wp_admin_upload_v10` AJAX action for both authenticated and unauthenticated users without implementing capability checks or nonce verification. This makes it possible for unauthenticated attackers to inject arbitrary WordPress media attachments into galleries and manipulate gallery metadata via the `cg_check_wp_admin_upload_v10` action. It does not enable an attacker to move or upload files.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 17, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & StripeBrowse contest-gallery / Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & StripeDefault status: unaffected | CVE List | Through 28.0.2 | affected |
References
5plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/include-functions-v10.php plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/v10-admin/gallery/wp-uploader.php wordpress.org
https://wordpress.org/plugins/contest-gallery wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/e000c4ad-43ec-4ad0-89f9-74e9e6d8b917?source=cve