CVE-2026-89138 farazfrank CVE debrief

Who should care

Defenders of WordPress installations using the Filter Gallery plugin, especially those with subscriber-level access or higher, should assess exposure and prioritize remediation. This includes reviewing and updating the plugin, restricting access, and monitoring for suspicious activity. Additionally, security teams and operators managing WordPress environments should verify the integrity of their installations and take appropriate measures to protect their

Why it matters

The Filter Gallery plugin for WordPress has an authorization bypass vulnerability that allows authenticated attackers to modify arbitrary posts and options, requiring defenders to review and update the plugin, restrict access, and monitor for suspicious activity.

• Authenticated attackers with subscriber-level access and above can overwrite titles and content of arbitrary WordPress posts
• Authenticated attackers with subscriber-level access and above can write the _wp_attachment_image_alt meta key on arbitrary posts
• Authenticated attackers with subscriber-level access and above can create or overwrite arbitrary ufg_gallery_* options

Technical summary

The Filter Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the title and content of arbitrary WordPress posts, write the _wp_attachment_image_alt meta key on arbitrary posts, and create or overwrite arbitrary ufg_gallery_* options.

Defensive priority

Medium priority for defenders of WordPress installations using the Filter Gallery plugin, especially those with subscriber-level access or higher.

Recommended defensive actions

• Review and update the Filter Gallery plugin to the latest version
• Restrict access to the WordPress installation for users with subscriber-level access and above
• Monitor for suspicious activity on the WordPress installation
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The vulnerability was reported by [email protected] and is documented in the CVE Program record and NVD vulnerability detail pages. The Filter Gallery plugin for WordPress has an authorization bypass vulnerability in all versions up to and including 1.1.4. This allows authenticated attackers with subscriber-level access and above to overwrite titles and content of arbitrary WordPress posts, write the _wp_attachment_image_alt meta key on arbitrary posts, and create or overwrite arbitrary ufg_gallery_* options. Defenders should to

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.