Farazfrank vulnerabilities

Products

• Filter Gallery 2

Newest

• farazfrank filter gallery Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'image_id' Parameter via ufg_save_gallery AJAX Action CVE-2026-89138 4.3 MediumSeptember 18, 2026
• farazfrank filter gallery Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Deletion via 'ufg_gallery_id' Parameter CVE-2026-89413 8.1 HighSeptember 18, 2026