CVE-2026-16056 — Contest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts

CVE-2026-16056

Contest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts PUBLISHED

Description (CNA)

The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history.

Affected (CNA)

Vendor / product	Versions
Unknown / Contest Gallery	affected 0 before 30.0.7

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/53aec8d3-da17-4183-91b3-73b45681fd20/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.