Description
The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Portfolio Filter Gallery | 2.0.2 – < 2.2.1 | 2.2.1 |
References
- https://wpscan.com/vulnerability/6ad219b8-3633-4c54-a6cf-71cc0acf035e/ exploit vdb-entry technical-description