CVE-2026-32537

The CVE-2026-32537 entry describes an authenticated Local File Inclusion (LFI) in the WordPress plugin Visual Portfolio, Photo Gallery & Post Grid (visual-portfolio) caused by improper filename control in PHP include/require statements. Affected versions are Visual Portfolio, Photo Gallery & Post...

WordPress Visual Portfolio Plugin <= 2.18.0 - Authenticated CSS Injection vulnerability

Authenticated CSS Injection vulnerability discovered by Krzysztof Zając in Visual Portfolio plugin versions = 2.18.0 Solution Update the WordPress Visual Portfolio, Photo Gallery & Post Grid plugin to the latest available version at least 2.19.0...