VYPR

Filter Gallery

by WordPress

CVEs (1)

  • CVE-2026-90978Sep 18, 2026
    risk 0.00cvss epss

    The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capability check, allowing low-privileged users to overwrite the content of arbitrary posts and delete the Filter Gallery…