Description
The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.
Published: 2026-10-10
Score: 4.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized access to galleries and filters via inadequate authorization checks
Action: Apply patch
AI Analysis

Impact

The Portfolio Filter Gallery WordPress plugin allows any logged‑in user with the Contributor role to invoke a set of AJAX operations without performing the proper authorization checks. This flaw permits such users to read, modify, and delete galleries belonging to other users as well as site‑wide gallery filters, effectively exposing sensitive content and enabling content tampering.

Affected Systems

WordPress sites running the Portfolio Filter Gallery plugin before version 2.2.1 are affected, regardless of other installed themes or plugins. The vulnerability is restricted to users possessing at least Contributor privileges.

Risk and Exploitability

Because the flaw can be exploited from any website that hosts the plugin via simple AJAX requests, the attack vector is inferred to be web application based. The CVSS score is 4.7, indicating a moderate severity, and the EPSS is unavailable. The security impact is significant for sites with contributors who should not have such rights. The vulnerability is not currently listed in the CISA KEV catalog.

Generated by OpenCVE AI on October 10, 2026 at 13:24 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the Portfolio Filter Gallery plugin to version 2.2.1 or later
  • If an upgrade cannot be performed immediately, remove or downgrade Contributor capabilities to prevent use of the affected AJAX endpoints
  • Verify that all AJAX actions now require proper capability checks by reviewing plugin code or using security plugins that block unauthorized requests

Generated by OpenCVE AI on October 10, 2026 at 13:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 10 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-863
Metrics cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 10 Oct 2026 08:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284
CWE-285

Sat, 10 Oct 2026 06:15:00 +0000

Type Values Removed Values Added
Description The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role to read, modify and delete other users' galleries as well as site-wide gallery filters.
Title Portfolio Filter Gallery < 2.2.1 - Contributor+ Missing Authorization via Multiple AJAX Actions
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published:

Updated: 2026-10-10T12:06:42.387Z

Reserved: 2026-10-06T09:54:07.905Z

Link: CVE-2026-105976

cve-icon Vulnrichment

Updated: 2026-10-10T12:04:03.605Z

cve-icon NVD

Status : Deferred

Published: 2026-10-10T06:16:40.313

Modified: 2026-10-13T20:36:00.850

Link: CVE-2026-105976

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-10T13:30:18Z

Weaknesses