CVE-2026-24964: WordPress Contest Gallery plugin <= 28.1.2.1 - Server Side Request Forgery (SSRF) vulnerability
Published Mar 25, 2026
·Updated
Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.1.2.1.
Affected Software
1 affected component
Wasiliy Strecker Contest Gallery (WordPress plugin)<=28.1.2.1
Event History
Mar 25, 2026
CVE Published
via MITRE·04:14 PM
Data Sourced
via MITRE·04:14 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-24964?
CVE-2026-24964 has a medium severity score of 6.4 according to the CVSS 3.1 framework.
2
How do I fix CVE-2026-24964?
To fix CVE-2026-24964, update the Contest Gallery plugin to version 28.1.2.2 or later.
3
What does CVE-2026-24964 affect?
CVE-2026-24964 affects the Contest Gallery plugin for WordPress with versions up to and including 28.1.2.1.
4
What type of vulnerability is CVE-2026-24964?
CVE-2026-24964 is classified as a Server-Side Request Forgery (SSRF) vulnerability.
5
Who is the developer of the software affected by CVE-2026-24964?
The developer of the software affected by CVE-2026-24964 is Wasiliy Strecker.