2 matches found
CVE-2026-16056: Missing Authorization
The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history...
4.3CVSS5.8AI score0.0027EPSS
SaveExploits0References2
PT-2026-67655
The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history...
5.5AI score0.0027EPSS
SaveExploits0References2
20