https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:23:59.109176+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-283993 EUVD-2026-283993 2026-10-06T02:23:59.168956+00:00 EUVD-2026-283993 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1036 fkie_cve-2026-1036 2026-10-06T02:23:59.169006+00:00

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_comment() function in all versions up to, and including, 1.8.36. This makes it possible for unauthenticated attackers to delete arbitrary image comments. Note: comments functionality is only available in the Pro version of the plugin.

 https://cve.radiocsirt.org/vuln/ghsa-fj27-mvcr-jjvm GHSA-fj27-mvcr-jjvm 2026-10-06T02:23:59.169075+00:00

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_comment() function in all versions up to, and including, 1.8.36. This makes it possible for unauthenticated attackers to delete arbitrary image comments. Note: comments functionality is only available in the Pro version of the plugin.