CVE-2026-42680 is an Incorrect Privilege Assignment vulnerability in Contest Gallery Pro WordPress plugin developed by Wasiliy Strecker / ContestGallery. The vulnerability allows privilege escalation attacks. The issue affects Contest Gallery Pro versions from unknown starting point through version 29.0.1. This is a privilege escalation vulnerability that could allow attackers to gain elevated permissions within the WordPress environment. The vulnerability has been assigned a high criticality rating.