Orta CVSS 4.7
CVE-2026-105976: CVE-2026-105976: hatalı yetkilendirme
Açıklama (NVD)
The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.
Özet bilgiler
- CVSS v3.1
- 4.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - EPSS
- %0,21 (yüzdelik 11)
- CWE
- CWE-863
- Yama
- Yok / bilinmiyor