CVE-2025-12849: Contest Gallery <= 28.0.2 - Missing Authorization
The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.0.2. This is due to the plugin registering the cgcheckwpadminuploadv10 AJAX action for both authenticated and unauthenticated users without implementing capability checks or nonce verification. This makes it possible for unauthenticated attackers to inject arbitrary WordPress media attachments into galleries and manipulate gallery metadata via the cgcheckwpadminuploadv10 action. It does not enable an attacker to move or upload files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12849?
CVE-2025-12849 has a high severity rating due to its potential for unauthorized access to sensitive functionalities.
How do I fix CVE-2025-12849?
To fix CVE-2025-12849, you should update the Contest Gallery plugin to version 28.0.3 or later.
What causes the vulnerability in CVE-2025-12849?
The vulnerability in CVE-2025-12849 is caused by an authorization bypass in the AJAX action available to both authenticated and unauthenticated users.
Which versions of the Contest Gallery plugin are affected by CVE-2025-12849?
CVE-2025-12849 affects all versions of the Contest Gallery plugin up to and including 28.0.2.
Is CVE-2025-12849 being actively exploited?
As of the latest updates, there is no confirmed active exploitation of CVE-2025-12849, but it is recommended to patch the vulnerability immediately.