Plugin icon

InPost Gallery

inpost-gallery

Vulnerabilities:

7

Last Updated:

March 6, 2026

Active Installs:

800

Published
Title
Fixed in
CVSS
Published
2026-04-20
Title
InPost Gallery < 2.1.5 - Unauthenticated SQL Injection
Fixed in
Fixed in 2.1.5
CVSS
7.5 (high)
Published
2025-09-03
Title
InPost Gallery < 2.1.4.6 - Authenticated (Subscriber+) Local File Inclusion
Fixed in
Fixed in 2.1.4.6
CVSS
8.8 (high)
Published
2025-04-11
Title
InPost Gallery < 2.1.4.4 - Cross-Site Request Forgery
Fixed in
Fixed in 2.1.4.4
CVSS
4.3 (medium)
Published
2024-11-25
Title
InPost Gallery < 2.1.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template
Fixed in
Fixed in 2.1.4.3
CVSS
6.3 (medium)
Published
2023-03-22
Title
InPost Gallery < 2.1.4.2 - Reflected XSS
Fixed in
Fixed in 2.1.4.2
CVSS
7.5 (high)
Published
2022-11-28
Title
InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE
Fixed in
Fixed in 2.1.4.1
CVSS
10.0 (critical)
Published
2016-10-18
Title
InPost Gallery <= 2.1.2 - LFI & Authenticated Stored XSS
Fixed in
Fixed in 2.1.2.1
CVSS
n/a