CVE-2026-73184: WordPress Global Gallery plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability
Published Aug 19, 2026
·Updated
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
Affected Software
1 affected component
WordPress Global Gallery Plugin<=11.1.2
Event History
Aug 19, 2026
CVE Published
via MITRE·12:38 PM
Data Sourced
via MITRE·12:38 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is described as unauthenticated, so an attacker does not need a WordPress account or existing plugin privileges. Successful exploitation requires user interaction, as indicated by the UI:R metric.
2
Which installations are affected?
WordPress sites using Global Gallery version 11.1.2 or earlier are affected according to the provided data. The data does not state whether any particular plugin configuration is required.
3
What impact can successful exploitation have?
The supplied severity vector indicates low impacts to confidentiality, integrity, and availability, with scope changed. This is an XSS issue, meaning attacker-controlled script could execute in a user's browser if exploitation succeeds.