CVE-2026-90978

The Filter Gallery WordPress plugin before version 1.1.5 is vulnerable due to a fail-open nonce check on several of its AJAX handlers: when the nonce field is omitted, verification passes, and no additional capability check is applied. This allows low-privileged users (Subscriber and above) to ov...