CVE-2025-49394

Description

Missing Authorization vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album. 3d-image-gallery allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Image Gallery block – Create and display photo gallery/photo album.: from n/a through <= 1.0.7.

PUBLISHED Reserved 2025-06-04 | Published 2025-11-06 | Updated 2025-11-06 | Assigner Patchstack

Problem types

Missing Authorization

Product status

Credits

Denver Jackson | Patchstack Bug Bounty Program finder

References

vdp.patchstack.com/...-7-broken-authentication-vulnerability vdb-entry

cve.org (CVE-2025-49394)

nvd.nist.gov (CVE-2025-49394)

Download JSON