What’s Vulnerable › Products

farazfrank Filter Gallery vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your farazfrank Filter Gallery version is affected

Latest farazfrank Filter Gallery vulnerabilities

• CVE-2026-89413 — Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Deletion via 'ufg_gallery_id' Parameter (CVSS 8.1)
• CVE-2026-89138 — Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'image_id' Parameter via ufg_save_gallery AJAX Action (CVSS 4.3)