CVE-2026-90978

CVE-2026-90978 affects the Filter Gallery WordPress plugin in versions before 1.1.5 . The root cause is a fail-open nonce check : when the nonce field is omitted from a request, several AJAX handlers skip nonce verification entirely and apply no capability check , allowing users with Subscriber o...