VYPR

HM Books Gallery

by WordPress

CVEs (1)

  • CVE-2026-5347MedApr 24, 2026
    risk 0.34cvss 5.3epss 0.00

    The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0. This is due to the absence of capability checks and nonce verification in the admin_init hook that handles the permalink settings update at line 205-209 of…