Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Wasiliy Strecker / ContestGallery developer | Contest Gallery | unaffected |
|
No data.
No data.
No data.
Subscriptions
No data.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 25 Mar 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2. | |
| Title | WordPress Contest Gallery plugin <= 28.1.2.2 - Account Takeover vulnerability | |
| Weaknesses | CWE-288 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Patchstack
Published:
Updated: 2026-03-25T16:14:39.024Z
Reserved: 2026-01-28T09:52:08.058Z
Link: CVE-2026-25035
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-03-25T17:16:43.377
Modified: 2026-03-25T17:16:43.377
Link: CVE-2026-25035
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses