Critical Alert 3 Active Exploits Detected Today

CVE-2025-39964 — Linux Kernel Race Condition Vulnerability →
CVE-2026-53266 — Linux Kernel Out-of-Bounds Write Vulnerability →
CVE-2025-39682 — Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability →
Powered by CVE Watchtower
×
September 20, 2026

CVE Watchtower

← Back to CVE List

CVE-2026-90978NVD

Description

The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capability check, allowing low-privileged users to overwrite the content of arbitrary posts and delete the Filter Gallery WordPress plugin before 1.1.5's stored gallery options.
Severity Level
UNKNOWN
Published Date
18/09/2026
Last Modified
18/09/2026
Exploitation Status
????
EPSS Score
0.20% (percentile 9.5%)

Affected & Patched Versions

ProductAffected VersionsPatched Version
Unknown Filter Gallery1.1.2 - < 1.1.5N/A

References