CVE-2026-15236

The Gallery for Google Photos WordPress plugin versions prior to 1.2.1 is vulnerable to an unauthenticated OAuth token disclosure vulnerability. The plugin fails to properly restrict access to stored third-party OAuth credentials, allowing unauthenticated users to access persistent access and ref...