一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月20日

CVE-2026-92423 – The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check

未分类
📑 文章目录

The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user’s own posts before returning post data, allowing authenticated users with Author-level access and above to disclose the titles, authors, dates and statuses of other users’ draft and private posts.