4.7
Moyenne
CVE-2026-105976 The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of…
Description
The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Portfolio Filter Gallery 2.2 | premières → < 2.2.1 | 2.2.1 |