Skip to content
Sign in
4.7 Medium

CVE-2026-105976 The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of…

Description

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.

Affected products and versions

Product Affected versions Fixed in
Portfolio Filter Gallery 2.2 earliest → < 2.2.1 2.2.1

Other CVEs of Portfolio Filter Gallery

The 2 CVEs of Portfolio Filter Gallery →
CVE-2026-105977 The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before… 2.2 Low
Track this CVE