Medium severity6.5NVD Advisory· Published Nov 5, 2026
CVE-2026-115451
CVE-2026-115451
Description
Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.6 - Anyone could delete images in the Gallery folders, including images on published articles and modules, without logging in. In ACF 3.1.7 and 3.1.8, users could also see, remove or save each other’s unsaved uploads.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 2.8.13-2.8.15, 3.1.4-3.1.8
- Range: 1.2.7-1.2.9, 2.1.2-2.1.6
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.