What is the CVSS score of EUVD-2026-52592?

EUVD-2026-52592 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for EUVD-2026-52592?

Yes, a public proof-of-concept exploit is available for EUVD-2026-52592. Prioritise patching immediately. EPSS: 0.1%.

Is there a patch available for EUVD-2026-52592?

Yes, a patch is available for EUVD-2026-52592. Update the affected software to the latest version immediately.

Contest Gallery EUVD-2026-52592

| CVE-2026-16056 MEDIUM

Missing Authorization (CWE-862)

2026-08-04 WPScan

GHSA-xp5w-q4v3-mxrm

WordPress Authentication Bypass Contest Gallery Unknown

4.3

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

PR:L confirmed by Subscriber-level auth requirement; C:L reflects prompt history disclosure only; no integrity or availability impact applies.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 04, 2026 - 18:30 vuln.today

Patch available

Aug 04, 2026 - 07:01 EUVD

CVE Published

Aug 04, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 04, 2026 - 06:00 cve.org

MEDIUM 4.3

DescriptionCVE.org

The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history.

AnalysisAI

Contest Gallery WordPress plugin (all versions before 30.0.7) exposes the site's complete stored OpenAI prompt history to any authenticated user holding at minimum a Subscriber role, due to a handler that performs neither a capability check nor a nonce verification. An attacker with a basic WordPress account can call the unprotected AJAX endpoint directly to exfiltrate the full prompt history, potentially exposing confidential business logic, AI workflows, or sensitive data embedded in prompts. No active exploitation is confirmed (not in CISA KEV), but a publicly available proof-of-concept exists per WPScan, and EPSS remains low at 0.13% (3rd percentile).

Technical ContextAI

The vulnerability is rooted in CWE-862 (Missing Authorization): the plugin registers a WordPress AJAX handler (likely via wp_ajax_ hooks) that executes without calling current_user_can() to verify appropriate permissions, and without validating a nonce to prevent cross-site request forgery. The affected product is identified by CPE cpe:2.3:a:unknown:contest_gallery:*:*:*:*:*:*:*:*, covering all versions from 0 through 30.0.6. The plugin integrates with OpenAI's API and persists AI-generated prompt history to the WordPress database; the unguarded endpoint reads and returns this stored history to any requester who presents a valid session cookie, regardless of their assigned role. WordPress's role hierarchy means Subscriber is the lowest non-anonymous tier, making this exploitable by any registered site user.

RemediationAI

Upgrade the Contest Gallery WordPress plugin to version 30.0.7 or later; this release introduces proper capability and nonce verification on the vulnerable handler and is confirmed available from the vendor. If an immediate upgrade is not operationally feasible, administrators should consider temporarily deactivating the plugin to eliminate the attack surface, accepting the trade-off of losing contest functionality. As a secondary measure, disabling open WordPress user registration reduces the pool of potential attackers, though it does not protect against existing low-privileged accounts. Reviewing and rotating any sensitive information previously stored in OpenAI prompt history is advisable if the site had untrusted registered users. See the WPScan advisory at https://wpscan.com/vulnerability/53aec8d3-da17-4183-91b3-73b45681fd20/ for further details.