CVE-2026-16056
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 04, 2026
Vendor
unknown
Description
The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history.