Veille CVE

Recherche « Unknown Portfolio Filter Gallery »

2 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Portfolio Filter Gallery » ✕
  1. CVE-2026-105977 2.2 Faible

    Unknown Portfolio Filter Gallery

    The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.

  2. CVE-2026-105976 4.7 Moyenne

    Unknown Portfolio Filter Gallery

    The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.