CVE-2026-90978

Filter Gallery < 1.1.5 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion via Fail-Open Nonce Check

State: Published
Severity: 7.1 High
Published: Sep 18, 2026
Updated: Sep 18, 2026
Reserved: Sep 14, 2026

Description

The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capability check, allowing low-privileged users to overwrite the content of arbitrary posts and delete the Filter Gallery WordPress plugin before 1.1.5's stored gallery options.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L	CISA-ADP

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
Filter GalleryUnknown	1.1.2 to before 1.1.5Affected

References

https://wpscan.com/vulnerability/39321ecd-98e5-4f4e-9a42-bedf5904c3d1/exploitvdb-entrytechnical-description

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.