Security
Loading…

CVE-2026-90978

HIGHCVSS 7.1
View on NVD← Back to search
Description

The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capability check, allowing low-privileged users to overwrite the content of arbitrary posts and delete the Filter Gallery WordPress plugin before 1.1.5's stored gallery options.

Timeline
Published:September 18th, 2026 6:16 AM
Last modified:September 18th, 2026 7:08 PM
CVSS Scoring

CVSS v3: 7.1 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Weaknesses (CWE)
CWE-284
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute