What is the CVSS score of CVE-2026-4766?

CVE-2026-4766 has a CVSS 3.1 base score of 6.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of WordPress are affected by CVE-2026-4766?

Organizations using Easy Image Gallery should be aware of moderate risk from CVE-2026-4766, a cross-site scripting vulnerability rated CVSS 6.4.

How to fix or mitigate CVE-2026-4766?

Within 30 days: Identify affected systems running for WordPress is vulnerable to Stored Cross-Site Scripting v and apply vendor patches as part of regular patch cycle. Verify Content-Security-Policy and output encoding.

WordPress CVE-2026-4766

EUVD-2026-15181 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-03-25 Wordfence

WordPress XSS

6.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 25, 2026 - 01:45 euvd

EUVD-2026-15181

Analysis Generated

Mar 25, 2026 - 01:45 vuln.today

CVE Published

Mar 25, 2026 - 01:25 nvd

MEDIUM 6.4

DescriptionCVE.org

The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and including, 1.5.3. This is due to insufficient input sanitization and output escaping on user-supplied gallery shortcode values. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

AnalysisAI

The Easy Image Gallery plugin for WordPress contains a Stored Cross-Site Scripting (XSS) vulnerability in the Gallery shortcode post meta field that affects all versions up to and including 1.5.3. Authenticated attackers with Contributor-level access or higher can inject arbitrary JavaScript that executes in the browsers of users viewing the affected pages, potentially compromising user sessions, stealing credentials, or performing actions on behalf of legitimate users. The vulnerability stems from insufficient input sanitization and output escaping in the shortcode handler, as documented in the WordPress plugin repository source code.

Technical ContextAI

This vulnerability is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting). The Easy Image Gallery plugin (CPE: cpe:2.3:a:devrix:easy_image_gallery:*:*:*:*:*:*:*:*) processes user-supplied gallery shortcode values stored in post metadata without proper sanitization on input or escaping on output. The vulnerable code path is located in the template-functions.php file (line 240 as referenced in the WordPress plugin repository), where shortcode attributes derived from post meta are rendered directly into the page output without adequate HTML entity encoding or content security policies. WordPress shortcodes are evaluated server-side but the values persist in the database, making this a Stored XSS variant that affects all users accessing the compromised pages rather than requiring individual user interaction.

RemediationAI

Website administrators should immediately upgrade the Easy Image Gallery plugin to a patched version beyond 1.5.3 if available from the plugin developer, or disable and remove the plugin if no patch is available. Until an update is released, restrict user roles with content creation capabilities to only those who are fully trusted, and audit all existing gallery shortcode post metadata for any suspicious or encoded content that may indicate prior exploitation. Implement additional WordPress security hardening by enabling a Web Application Firewall (WAF) with XSS filtering rules, deploying a Content Security Policy (CSP) header to restrict inline script execution, and regularly reviewing WordPress user accounts and permissions to minimize the number of accounts with Contributor or higher privileges. Detailed remediation guidance and vulnerability tracking can be found at https://www.wordfence.com/threat-intel/vulnerabilities/id/e7279f74-c2bd-4601-b8d5-0effe43705a5.