CVE-2026-114705: WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability
Published Oct 24, 2026
·Updated
Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Feed Gallery: from n/a through 5.0.13.
Affected Software
1 affected component
Quadlayers WP Social Feed Gallery<=5.0.13
Event History
Oct 24, 2026
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vector is network-accessible and requires no privileges or user interaction, so an unauthenticated remote attacker may be able to exploit it.
2
Which installations are affected?
WP Social Feed Gallery versions through 5.0.13 are affected. The available information does not state whether a particular default configuration is required.
3
What is the potential impact?
The reported severity is medium with a 6.5 CVSS score. The vector indicates low confidentiality and integrity impact, with no availability impact.