TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href parameter.
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.00528·Published 2026-10-20·Fixed in 1.1.0CWE-22