CVE-2026-119484: WordPress Photo Gallery by Supsystic plugin <= 1.21.6 - Cross Site Request Forgery (CSRF) vulnerability

Q: Which installations are affected?

The issue affects Photo Gallery by Supsystic installations through version 1.21.6. The available data does not identify a fixed version.

Q: What must an attacker do to exploit this issue?

This is a cross-site request forgery vulnerability, so exploitation involves causing a user’s browser to submit an unintended request to the plugin. The available data does not specify which action can be triggered or what user privileges are required.

Q: Can the available information confirm whether default configurations are affected?

No. The provided data does not state whether the vulnerable request is enabled or reachable in a default installation.

Published Nov 7, 2026

Updated

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Photo Gallery by Supsystic gallery-by-supsystic allows Cross Site Request Forgery.This issue affects Photo Gallery by Supsystic: from n/a through 1.21.6.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Photo Gallery by Supsystic to a version that resolves this vulnerability.
Fixed in 1.21.7

Event History

Nov 7, 2026

CVE Published

via MITRE·09:11 AM

Data Sourced

via MITRE·09:11 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

The issue affects Photo Gallery by Supsystic installations through version 1.21.6. The available data does not identify a fixed version.

What must an attacker do to exploit this issue?

This is a cross-site request forgery vulnerability, so exploitation involves causing a user’s browser to submit an unintended request to the plugin. The available data does not specify which action can be triggered or what user privileges are required.

Can the available information confirm whether default configurations are affected?

No. The provided data does not state whether the vulnerable request is enabled or reachable in a default installation.

CVE-2026-119484: WordPress Photo Gallery by Supsystic plugin <= 1.21.6 - Cross Site Request Forgery (CSRF) vulnerability

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

What must an attacker do to exploit this issue?

Can the available information confirm whether default configurations are affected?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What must an attacker do to exploit this issue?

Can the available information confirm whether default configurations are affected?