CVE-2026-105876: WordPress Modula Image Gallery plugin <= 3.0.11 - Sensitive Data Exposure vulnerability

Q: Who can exploit this issue?

The vulnerability is remotely exploitable with low attack complexity and requires no privileges or user interaction. An unauthenticated attacker may be able to retrieve embedded sensitive data.

Q: Which installations are affected?

WP Chill Modula Image Gallery versions through 3.0.11 are affected. The available data does not identify a fixed version or any configuration prerequisite.

Q: What is the expected impact?

The reported impact is limited to confidentiality: sensitive embedded data may be exposed. No integrity or availability impact is indicated.

Published Oct 7, 2026

Updated

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from n/a through 3.0.11.

Affected Software

1 affected component

WP Chill Modula Image Gallery<=3.0.11

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Modula Image Gallery to a version that resolves this vulnerability.
Fixed in 3.0.12

Event History

Oct 7, 2026

CVE Published

via MITRE·09:16 AM

Data Sourced

via MITRE·09:16 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vulnerability is remotely exploitable with low attack complexity and requires no privileges or user interaction. An unauthenticated attacker may be able to retrieve embedded sensitive data.

Which installations are affected?