A vulnerability categorized as critical has been discovered in Wasiliy Strecker Contest Gallery Pro Plugin up to 29.0.1 on WordPress. This impacts an unknown function. The manipulation results in incorrect privilege assignment. This vulnerability is reported as CVE-2026-42680 . The attack can be launched remotely. No exploit exists.