A vulnerability labeled as critical has been found in Image Gallery Plugin up to 2.12.28 on WordPress. Impacted is the function
ajax_import_file. Executing manipulation can lead to improper authorization.
The identification of this vulnerability is CVE-2025-12494. The attack may be launched remotely. There is no exploit available.
