{
 "id": "WPSEC-2026-1641",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1641/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1641/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1641/index.md",
 "title": "Visual Portfolio, Photo Gallery & Post Grid <= 3.8.2 - Authenticated (Subscriber+) Sensitive Information Exposure via Gallery Preview",
 "description": "The Gallery by Visual Portfolio plugin for WordPress is vulnerable to Sensitive Information Exposure via the gallery preview frame in all versions up to, and including, 3.8.2, due to the preview only verifying a nonce that is printed on every admin page, without checking that the user can edit content, and rendering a gallery from posted attributes, including a custom query, without limiting post statuses. This makes it possible for authenticated attackers, with subscriber-level access and above, to render galleries that show the titles, excerpts and images of other users' draft and private posts.",
 "plugin": {
  "slug": "visual-portfolio",
  "name": "Visual Portfolio, Photo Gallery & Post Grid",
  "full_name": "Gallery by Visual Portfolio",
  "wordpress_org": "https://wordpress.org/plugins/visual-portfolio/",
  "advisories_url": "https://wpsec.com/vuln/plugin/visual-portfolio/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/visual-portfolio"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 4.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "3.9.0",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 3.9.0"
  ]
 },
 "introduced_in": null,
 "fixed_in": "3.9.0",
 "remediation": "Update to 3.9.0 or later.",
 "fix_released": "2026-10-24T08:22:01+00:00",
 "published": "2026-10-25T08:43:04+00:00",
 "updated": "2026-10-24T13:33:09.118700+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1641/",
  "https://plugins.svn.wordpress.org/visual-portfolio/tags/3.9.0/",
  "https://wordpress.org/plugins/visual-portfolio/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/visual-portfolio",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-10-25"
 }
}