{"id":"CVE-2026-105977","title":"The Portfolio Filter Gallery  WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachmen…","summary":"The Portfolio Filter Gallery  WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachmen…","severity":"low","cvss":2.2,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-639"],"published":"2026-10-10","updated":"2026-10-13","sourceUpdated":"2026-10-13T20:36:00.850","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-105977","references":[{"url":"https://wpscan.com/vulnerability/6ad219b8-3633-4c54-a6cf-71cc0acf035e/","label":"contact@wpscan.com"}],"tags":["nvd","cve.org"],"epss":0.00179,"epssPercentile":0.0742,"ingestedAt":"2026-10-10T06:24:42.863Z","product":"Portfolio Filter Gallery","affected":["portfolio_filter_gallery >= 2.0.2 < 2.2.1"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-10T12:03:54.191844Z"},"slug":"CVE-2026-105977","body":"## Overview\n\nThe Portfolio Filter Gallery  WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":12,"depthScoreParts":{"impact":12.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":218842,"id":"CVE-2026-105977","ts":1791635586858,"field":"cvss","old":null,"new":"2.2"},{"seq":218841,"id":"CVE-2026-105977","ts":1791635586858,"field":"severity","old":"none","new":"low"}]}