farazfrank
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Filter Gallery | 2 | – | Sep 18, 2026 |
Exploited and recent CVEs
- CVE-2026-89138 Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'image_id' Parameter via ufg_save_gallery AJAX Action 0.4%
- CVE-2026-89413 Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Deletion via 'ufg_gallery_id' Parameter 0.5%