UNKNOWN NVD

CVE-2026-16056

The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down

The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history.

References

https://wpscan.com/vulnerability/53aec8d3-da17-4183-91b3-73b45681fd20/

Published: 2026-08-04 · Source: NVD · Feed updated: 2026-08-04

This unknown severity vulnerability was published on 2026-08-04 via NVD.

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.