AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-16056

UNKNOWN · CVSS N/A EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-04 · Last synced 2026-08-04

CyberRota Analysis

AI-Generated

The Contest Gallery plugin for WordPress versions prior to 30.0.7 is vulnerable due to a lack of capability and nonce checks, enabling any authenticated user, including those with Subscriber privileges, to access the site's complete OpenAI prompt history. This exposure could lead to unauthorized data access and potential privacy breaches. WordPress site administrators and security teams should prioritize updating this plugin to mitigate the risk of sensitive information disclosure.

CVE
CVE-2026-16056
Severity
UNKNOWN
CVSS
N/A
EPSS
0.13%
WordPress

Original NVD Description

The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history.