PULSE
EN VIVO28señales / 24h
FEED
ransomgunra reclama a worldtube · KR · Technologyransomqilin reclama a WD Masonry & Concrete · US · Otherransomakira reclama a University SprinklerSystems · Manufacturingransomorova reclama a Tat Fung Textile Co., Ltd. · HK · Manufacturingransomorova reclama a Integrated Site Management · US · Professional Servicesransomorova reclama a Conceptual Designs, Inc. · US · Otherransomorova reclama a JK Capital Management Limited · HK · Financial Servicesransomorova reclama a Global Friction Products, Inc · US · Manufacturingransomaurora reclama a GILDE Handwerk Macrander GmbH & Co. KG · DE · Manufacturingransomaurora reclama a US Installation Group, Inc. · US · Manufacturingransomincransom reclama a pushidrosal.id · ID · Otherransomincransom reclama a lccgroup.com · PH · Professional Servicesransomincransom reclama a https://geleximco.vn/ · VN · Manufacturingransomincransom reclama a clintonhealthaccess.org · US · Healthcareransomgunra reclama a worldtube · KR · Technologyransomqilin reclama a WD Masonry & Concrete · US · Otherransomakira reclama a University SprinklerSystems · Manufacturingransomorova reclama a Tat Fung Textile Co., Ltd. · HK · Manufacturingransomorova reclama a Integrated Site Management · US · Professional Servicesransomorova reclama a Conceptual Designs, Inc. · US · Otherransomorova reclama a JK Capital Management Limited · HK · Financial Servicesransomorova reclama a Global Friction Products, Inc · US · Manufacturingransomaurora reclama a GILDE Handwerk Macrander GmbH & Co. KG · DE · Manufacturingransomaurora reclama a US Installation Group, Inc. · US · Manufacturingransomincransom reclama a pushidrosal.id · ID · Otherransomincransom reclama a lccgroup.com · PH · Professional Servicesransomincransom reclama a https://geleximco.vn/ · VN · Manufacturingransomincransom reclama a clintonhealthaccess.org · US · Healthcare
← Todos los CVEs
CVE Watch4 ago 2026

CVE-2026-16056

The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any auth

CVSS

Sin CVSS

EPSS

KEV

Exploit Today

0-100

Publicado: 4 ago 2026 · Última mod.: 4 ago 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.