CVE-2021-24795: Phoeniixx Filter Portfolio Gallery

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Filter Portfolio Gallery WordPress plugin through 1.5 is lacking Cross-Site Request Forgery (CSRF) check when deleting a Gallery, which could allow attackers to make a logged in admin delete arbitrary Gallery.

Affected products

• Phoeniixx Filter Portfolio Gallery: up to and including 1.5

Published 2021-12-13. Last modified 2026-06-17.