CVE-2026-16056
Contest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history.
| Vendor | unknown |
| Product | contest gallery |
| Published | Aug 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown contest gallery
Be the first to know when new unknown vulnerabilities affecting unknown contest gallery are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Contest Gallery
0 < 30.0.7
References
Credits
Meher Sudhakar Abbireddi WPScan