Plugin icon

Filter Gallery

filter-gallery

Vulnerabilities:

5

Last Updated:

September 15, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-09-17
Title
Filter Gallery < 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'image_id' Parameter via ufg_save_gallery AJAX Action
Fixed in
Fixed in 1.1.5
CVSS
4.3 (medium)
Published
2026-09-17
Title
Filter Gallery < 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Deletion via 'ufg_gallery_id' Parameter
Fixed in
Fixed in 1.1.5
CVSS
8.1 (high)
Published
2026-09-16
Title
Filter Gallery < 1.1.5 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion via Fail-Open Nonce Check
Fixed in
Fixed in 1.1.5
CVSS
7.1 (high)
Published
2022-12-06
Title
WordPress Filter Gallery Plugin < 0.1.6 - Admin+ Stored XSS
Fixed in
Fixed in 0.1.6
CVSS
3.4 (low)
Published
2021-07-05
Title
Filter Gallery < 0.0.7 - Unauthorised AJAX Calls
Fixed in
Fixed in 0.0.7
CVSS
7.4 (high)