Verified

CVE-2026-105977: Portfolio Filter Gallery 2.0.2 to before 2.2.1

Affected technology

Portfolio Filter Gallery · 2.0.2 to before 2.2.1
Vendor not specified by the source

Description’s affected range: before 2.2.1 does not perform a per-object authorization check before deleting an attachment

Component: Not specified by the source

The source does not specify what an attacker can achieve.

Published 2026-10-10 06:17:38.832023+00:00

GitHub Advisory Database · Source record · observed 2026-10-10 07:23:45.480922+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-10 06:17:36.054866+00:00 UTC