https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T22:09:48.165819+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-385316 EUVD-2026-385316 2026-10-10T22:09:48.213340+00:00 EUVD-2026-385316 https://cve.radiocsirt.org/vuln/fkie_cve-2026-105977 fkie_cve-2026-105977 2026-10-10T22:09:48.213376+00:00

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.

 https://cve.radiocsirt.org/vuln/ghsa-57vv-9g8j-wfp9 GHSA-57vv-9g8j-wfp9 2026-10-10T22:09:48.213409+00:00

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.