Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Portfolio Filter Gallery 2.2.1 Clear all filters
TI-2026-70271 CVE-2026-105977 · GHSA-57vv-9g8j-wfp9

Portfolio Filter Gallery lets contributors delete others' media

Priority LOW 11

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain…

CVSS 3.1LOW 2.2 Network High privileges No interaction EPSS 0.00179 Published 2026-10-10 Fixed in 2.2.1 CWE-639
TI-2026-70270 CVE-2026-105976 · GHSA-qpvh-mq7h-9x9h

Missing authorization in Portfolio Filter Gallery WordPress plugin

Priority LOW 21

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users'…

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.0021 Published 2026-10-10 Fixed in 2.2.1 CWE-863