Plugin icon

Photo Gallery by Ays – Responsive Image Gallery

gallery-photo-gallery

Vulnerabilities:

10

Last Updated:

May 27, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2025-12-01
Title
Photo Gallery by Ays < 6.4.9 - Cross-Site Request Forgery to Bulk Actions
Fixed in
Fixed in 6.4.9
CVSS
4.3 (medium)
Published
2025-09-22
Title
Photo Gallery by Ays < 6.3.9 - Contributor+ Stored XSS
Fixed in
Fixed in 6.3.9
CVSS
5.9 (medium)
Published
2024-06-28
Title
Photo Gallery by Ays < 5.7.1 - Administrator+ HTML Injection
Fixed in
Fixed in 5.7.1
CVSS
4.4 (medium)
Published
2024-03-25
Title
Photo Gallery by Ays < 5.5.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.5.3
CVSS
6.1 (medium)
Published
2023-10-03
Title
Photo Gallery by Ays < 5.2.7 - CSRF
Fixed in
Fixed in 5.2.7
CVSS
4.3 (medium)
Published
2023-08-18
Title
Photo Gallery by Ays < 5.1.4 - Reflected XSS
Fixed in
Fixed in 5.1.4
CVSS
7.1 (high)
Published
2023-05-16
Title
Photo Gallery by Ays < 5.1.7 - Reflected XSS
Fixed in
Fixed in 5.1.7
CVSS
5.8 (medium)
Published
2021-06-29
Title
Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injections
Fixed in
Fixed in 4.4.4
CVSS
7.6 (high)
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.4.4
CVSS
7.1 (high)
Published
2016-07-11
Title
Gallery Photo Gallery < 1.0.1 - SQL Injection
Fixed in
Fixed in 1.0.1
CVSS
9.8 (critical)