PT-2026-27814 · Ruhul Amin · My Album Gallery

Published 2026-03-25 · Updated 2026-03-30 · CVE-2026-22485

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions My Album Gallery versions through 1.0.4

Description An authorization issue exists in Ruhul Amin My Album Gallery. The issue involves exploiting incorrectly configured access control security levels.

Recommendations Update My Album Gallery to a version newer than 1.0.4.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-22485

Affected Products

My Album Gallery

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-22485 · Security Note
• https://twitter.com/CVEnew/status/2038618138757988694 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/my-album-gallery/vulnerability/wordpress-my-album-gallery-plugin-1-0-4-arbitrary-file-deletion-vulnerability?_s_id=cve · Note