← Back to Dashboard

CVE-2026-15236

HIGH NVD
CVSS Score
7.5
Severity
HIGH
Source
NVD
Published
Aug 02, 2026
Description

The Gallery for Google Photos WordPress plugin before 1.2.1 does not properly restrict access to the stored third-party OAuth credentials of the connected account, exposing the persistent access and refresh tokens to unauthenticated users and allowing long-term compromise of the linked account.

View Full Details ← Back