PT-2025-47044 · WordPress · Contest Gallery

Published 2025-11-15 · Updated 2025-11-15 · CVE-2025-12849

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Contest Gallery plugin for WordPress versions up to and including 28.0.2

Description The Contest Gallery plugin for WordPress is susceptible to authorization bypass. The plugin registers the cg check wp admin upload v10 AJAX action for both authenticated and unauthenticated users without capability checks or nonce verification. This allows unauthenticated attackers to inject arbitrary WordPress media attachments into galleries and manipulate gallery metadata via the cg check wp admin upload v10 action. The issue does not allow attackers to move or upload files.

Recommendations Update the Contest Gallery plugin to a version later than 28.0.2.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-12849

Affected Products

Contest Gallery

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-12849 · Security Note
• https://t.me/CVEtracker/37411 · Telegram Post
• https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/v10-admin/gallery/wp-uploader.php#L15 · Note
• https://wordpress.org/plugins/contest-gallery/#developers · Note
• https://twitter.com/VulmonFeeds/status/1989604225353941500 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/e000c4ad-43ec-4ad0-89f9-74e9e6d8b917?source=cve · Note
• https://twitter.com/CVEnew/status/1989592789479571720 · Twitter Post
• https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/v10-admin/gallery/wp-uploader.php#L173 · Note
• https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/include-functions-v10.php#L47 · Note
• https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/include-functions-v10.php#L42 · Note
• https://t.me/cveNotify/142908 · Telegram Post
• https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/include-functions-v10.php#L64 · Note