CVE-2026-42657

WordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerability

Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.

We have discovered 8 live websites that are affected by CVE-2026-42657.

Run a Free Instant Scan



Affected Software

Product  Contest Gallery
Category Wordpress Plugins
Vulnerable Domains8 live websites (100% of Contest Gallery install base)
Vulnerable Versions
  • from 0 through 28.1.7
Vulnerable Versions Count0 versions ( less than 0.1% of all versions)


Common Weakness Enumeration

CWE-1284 Improper Validation of Specified Quantity in Input



Details

  • Published - Jun 15, 2026
  • Updated - Jun 16, 2026

Credits

  • endy | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-42657
United States1 websites


Germany3 websites
Czech Republic1 websites
Japan1 websites
Netherlands1 websites
Russia1 websites

Website Distribution by TLD

Number of websites using CVE-2026-42657
.com2 websites
.de2 websites
.cz1 websites
.nl1 websites
.ru1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-42657

Top websites that are affected by CVE-2026-42657. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
********.**********.com Japan**,***,***
*******************.cz Czech Republic**,***,***
*********.photo Germany**,***,***
*******.com United States**,***,***
***********.nl Netherlands**,***,***
***.****************.ru Russia**,***,***
**************************.de Germany**,***,***
*********************.de Germany***,***,***
See full domain list

FAQ

CVE-2026-42657 is Improper Validation of Specified Quantity in Input in Contest Gallery
A total of 8 websites have been identified as vulnerable to CVE-2026-42657, based on global website indexing conducted by WebTechSurvey.
The Contest Gallery is affected by the CVE-2026-42657 vulnerability.
Contest Gallery versions up to and including 28.1.7 are vulnerable to CVE-2026-42657.