CVE-2026-24939

WordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through <= 2.13.6.

We have discovered 10,273 live websites that are affected by CVE-2026-24939.

Run a Free Instant Scan



Affected Software

Product  Modula Best Grid Gallery
Category Wordpress Plugins
Vulnerable Domains10,273 live websites (100% of Modula Best Grid Gallery install base)
Vulnerable Versions
  • from 0 through 2.13.6
Vulnerable Versions Count126 versions ( 100% of all versions)



Details

  • Published - Feb 3, 2026
  • Updated - Feb 3, 2026

Credits

  • Que Thanh Tuan | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-24939
United States2,453 websites


Germany1,521 websites
France787 websites
GB572 websites
Italy540 websites
Poland442 websites
Netherlands349 websites
Spain339 websites
Switzerland265 websites
Canada204 websites

Website Distribution by TLD

Number of websites using CVE-2026-24939
.com4,092 websites
.de994 websites
.co.uk393 websites
.it358 websites
.org358 websites
.pl340 websites
.fr339 websites
.nl316 websites
.ch207 websites
.net176 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-24939

Top websites that are affected by CVE-2026-24939. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
************.com United States**,***
***********.org United States**,***
************.com Cyprus***,***
**********.**.**.uk GB***,***
*************.***.uk GB***,***
*******************.com Belgium***,***
************.de Germany***,***
******.com United States***,***
*************.com France***,***
**************.de Germany***,***
See full domain list

FAQ

A total of 10,273 websites have been identified as vulnerable to CVE-2026-24939, based on global website indexing conducted by WebTechSurvey.
The Modula Best Grid Gallery is affected by the CVE-2026-24939 vulnerability.
Modula Best Grid Gallery versions up to and including 2.13.6 are vulnerable to CVE-2026-24939.