Unrated severityNVD Advisory· Published Oct 10, 2026

CVE-2026-105976

Description

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Portfolio Filter Galleryllm-fuzzy
Range: <2.2.1
Package: https://wordpress.org/plugins/portfolio-filter-gallery

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/1ad36801-d53b-4253-ab7a-bd91c0f144f3/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000