CVE-2026-90978 | Filter Gallery Plugin up to 1.1.4 on WordPress AJAX handlers nonce access control

September 18, 2026 Yanac

A vulnerability was found in Filter Gallery Plugin up to 1.1.4 on WordPress. It has been rated as problematic. This affects an unknown part of the component AJAX handlers. This manipulation of the argument nonce causes improper access controls.

This vulnerability is registered as CVE-2026-90978. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More