PT-2026-6228 · Unknown · Contest Gallery

Published 2026-02-03 · Updated 2026-02-03 · CVE-2026-24965

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Contest Gallery versions through 28.1.1

Description An issue exists in Contest Gallery that allows exploiting incorrectly configured access control security levels due to a missing authorization check.

Recommendations Update Contest Gallery to a version later than 28.1.1.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-24965

Affected Products

Contest Gallery

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-24965 · Security Note
• https://twitter.com/CVEnew/status/2018696384485147044 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/contest-gallery/vulnerability/wordpress-contest-gallery-plugin-28-1-1-broken-access-control-vulnerability?_s_id=cve · Note