CVE-2026-15236 [HIGH] – The Gallery for Google Photos WordPress plugin before 1.2.1 does not properly restrict ac

The Gallery for Google Photos WordPress plugin before 1.2.1 does not properly restrict access to the stored third-party OAuth credentials of the connected account, exposing the persistent access and refresh tokens to unauthenticated users and allowing long-term compromise of the linked account.