CVE-2026-15236

The CVE-2026-15236 affects the Gallery for Google Photos WordPress plugin: versions before 1.2.1 do not properly restrict access to stored third‑party OAuth credentials, exposing persistent access and refresh tokens to unauthenticated users and enabling long‑term compromise of the linked account....