farazfrank

Products

ProductCVEsExploitedLatest
Filter Gallery2–Sep 18, 2026

Exploited and recent CVEs

  • CVE-2026-89138 Medium 4.3 Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'image_id' Parameter via ufg_save_gallery AJAX Action 0.4%
  • CVE-2026-89413 High 8.1 Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Deletion via 'ufg_gallery_id' Parameter 0.5%