https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T18:31:33.346807+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-105977 fkie_cve-2026-105977 2026-10-11T18:31:33.348974+00:00

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.

 https://vulnerability.circl.lu/vuln/ghsa-57vv-9g8j-wfp9 GHSA-57vv-9g8j-wfp9 2026-10-11T18:31:33.349071+00:00

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.