Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'image_id' Parameter via ufg_save_gallery AJAX Action
medium
The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to overw...
- CVSS:
- 4.3
(Wordfence)
- Affected:
- up to 1.1.4
- Fixed in:
- 1.1.5
- Disclosed:
- Sep 17, 2026
CVE-2026-89138 on NVD →
Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Deletion via 'ufg_gallery_id' Parameter
high
The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to delet...
- CVSS:
- 8.1
(Wordfence)
- Affected:
- up to 1.1.4
- Fixed in:
- 1.1.5
- Disclosed:
- Sep 17, 2026
CVE-2026-89413 on NVD →
Filter Gallery <= 1.1.4 - Missing Authorization
medium
The Filter Gallery plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.1.4. This is due to a missing capability check on a function. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.
- CVSS:
- 4.3
(Wordfence)
- Affected:
- up to 1.1.4
- Fixed in:
- 1.1.5
- Disclosed:
- Sep 16, 2026
CVE-2026-90978 on NVD →
WordPress Filter Gallery Plugin <= 0.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
medium
The WordPress Filter Gallery Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ufg_gallery_filters
AJAX action in versions up to, and including, 0.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permi...
- CVSS:
- 5.5
(Wordfence)
- Affected:
- up to 0.1.5
- Fixed in:
- 0.1.6
- Disclosed:
- Dec 6, 2022
CVE-2022-4142 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database