https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T23:38:48.848357+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123666 CVE-2026-123666 — Photo Engine < 6.6.2 - Author+ Media Deletion via Collection Deletion 2026-11-11T23:38:48.849276+00:00

Affected: Unknown Photo Engine (Media Organizer & Lightroom)

The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.6.2 does not check that a user may delete the media in a collection before deleting it along with the collection, allowing users with the Author role and above to permanently delete other users' synced media, including administrators'.