CVE-2026-1302

MEDIUM EPSS 10.9%

Published Jan 24, 20265mo ago · Modified Jun 17, 20262w ago

4.4 CVSS 3.1

Medium

Published Jan 24, 2026 5mo ago

Last Modified Jun 17, 2026 2w ago

Description

The Meta-box GalleryMeta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

CVSS Details

Base Score

4.4

Exploitability

1.3

Impact

2.7

Vector string

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Attack Vector Network

Attack Complexity High

Privileges Required High

User Interaction None

Scope Changed

Confidentiality Low

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

10.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

References 6

plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/meta-box-gallerymeta/tags/3.0.1/gallerymetaboxes.php#L119
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/meta-box-gallerymeta/tags/3.0.1/gallerymetaboxes.php#L314
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/meta-box-gallerymeta/tags/3.0.1/templates/single-mb_gallery.php#L31
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/meta-box-gallerymeta/tags/3.0.1/templates/single-mb_gallery.php#L33
plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3446962/
wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/bb9ae252-7e5f-4dc0-a162-100493b81980?source=cve

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.