Vulnerability · Published Sep 18, 2026 · Assigned by WPScan
CVE-2026-90978Filter Gallery < 1.1.5 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion via Fail-Open Nonce Check
High 7.1
In plain English
A high-severity improper access control in Filter Gallery from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.3%top 72.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capability check, allowing low-privileged users to overwrite the content of arbitrary posts and delete the Filter Gallery WordPress plugin before 1.1.5's stored gallery options.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Filter Gallery | 1.1.2 – before 1.1.5 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
References
- https://wpscan.com/vulnerability/39321ecd-98e5-4f4e-9a42-bedf5904c3d1/ exploit, vdb-entry, technical-description