PT-2026-67090 · Undefined · Undefined
CVE-2026-16057
·
Published
2026-08-03
·
Updated
2026-08-03
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-membership test, which allows any Author-level or higher user to permanently delete arbitrary posts, pages, and other content they do not own.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined