CVE-2026-15236

Affected software: Gallery for Google Photos WordPress plugin (before 1.2.1). Vulnerability: Access control flaw allows unauthenticated access to stored third-party OAuth credentials (persistent access and refresh tokens) of the connected Google account. Impact (as described): Long-term compromis...