Plugin icon

Photo Gallery by 10Web – Mobile-Friendly Image Gallery

photo-gallery

Vulnerabilities:

47

Last Updated:

March 29, 2025

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2025-04-11
Title
Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.35 Reflected Cross-Site Scripting via 'image_id' Parameter
Fixed in
Fixed in 1.8.35
CVSS
6.1 (medium)
Published
2025-03-10
Title
Photo Gallery < 1.8.34 - Unauthenticated Stored XSS
Fixed in
Fixed in 1.8.34
CVSS
8.8 (high)
Published
2025-03-02
Title
Photo Gallery by 10Web < 1.8.33 - Admin+ Stored XSS
Fixed in
Fixed in 1.8.33
CVSS
3.5 (low)
Published
2024-11-08
Title
Photo Gallery by 10Web < 1.8.31 - Admin+ Stored XSS
Fixed in
Fixed in 1.8.31
CVSS
3.5 (low)
Published
2024-11-04
Title
Photo Gallery by 10Web < 1.8.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.31
CVSS
4.4 (medium)
Published
2024-09-23
Title
Photo Gallery by 10Web < 1.8.28 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.28
CVSS
4.4 (medium)
Published
2024-09-18
Title
Photo Gallery by 10Web <= 1.8.27 - Admin+ Stored XSS
Fixed in
Fixed in 1.8.28
CVSS
3.5 (low)
Published
2024-08-06
Title
Photo Gallery by 10Web < 1.8.29 - Admin+ Stored XSS
Fixed in
Fixed in 1.8.29
CVSS
3.8 (low)
Published
2024-06-06
Title
Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG
Fixed in
Fixed in 1.8.24
CVSS
6.4 (medium)
Published
2024-06-06
Title
Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.24 - Authenticated (Contributor+) Path Traversal via esc_dir Function
Fixed in
Fixed in 1.8.24
CVSS
6.8 (medium)
Published
2024-05-27
Title
Photo Gallery by 10Web < 1.8.26 - Subscriber+ Notice Dismiss
Fixed in
Fixed in 1.8.26
CVSS
4.3 (medium)
Published
2024-04-25
Title
Photo Gallery by 10Web < 1.8.21 - Missing Authorization
Fixed in
Fixed in 1.8.21
CVSS
5.3 (medium)
Published
2024-04-05
Title
Photo Gallery by 10Web < 1.8.22 - Admin+ Stored XSS via SVG
Fixed in
Fixed in 1.8.22
CVSS
3.4 (low)
Published
2024-03-26
Title
Photo Gallery by 10Web < 1.8.22 - Multiple Reflected XSS
Fixed in
Fixed in 1.8.22
CVSS
7.1 (high)
Published
2024-01-19
Title
Photo Gallery by 10Web - Mobile-Friendly Image Gallery < 1.8.20 - Directory Traversal to Arbitrary File Rename
Fixed in
Fixed in 1.8.20
CVSS
9.1 (critical)
Published
2023-12-21
Title
Photo Gallery by 10Web < 1.8.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget
Fixed in
Fixed in 1.8.19
CVSS
4.4 (medium)
Published
2023-03-27
Title
Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal
Fixed in
Fixed in 1.8.15
CVSS
4.1 (medium)
Published
2022-11-28
Title
Photo Gallery < 1.8.3 - Stored XSS via CSRF
Fixed in
Fixed in 1.8.3
CVSS
4.7 (medium)
Published
2022-08-09
Title
Photo Gallery < 1.7.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.7.1
CVSS
4.7 (medium)
Published
2022-05-16
Title
Photo Gallery < 1.6.4 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.4
CVSS
3.4 (low)
Published
2022-04-11
Title
Photo Gallery < 1.6.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.6.3
CVSS
6.1 (medium)
Published
2022-04-11
Title
Photo Gallery < 1.6.3 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.6.3
CVSS
8.6 (high)
Published
2022-02-15
Title
Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.6.0
CVSS
8.6 (high)
Published
2021-07-19
Title
Photo Gallery < 1.5.79 - Stored XSS via Uploaded SVG in Zip
Fixed in
Fixed in 1.5.79
CVSS
4.8 (medium)
Published
2021-07-18
Title
Photo Gallery < 1.5.75 - Stored Cross-Site Scripting via Uploaded SVG
Fixed in
Fixed in 1.5.75
CVSS
4.8 (medium)
Published
2021-07-18
Title
Photo Gallery < 1.5.75 - File Upload Path Traversal
Fixed in
Fixed in 1.5.75
CVSS
2.7 (low)
Published
2021-05-12
Title
Photo Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery Title
Fixed in
Fixed in 1.5.67
CVSS
6.6 (medium)
Published
2021-04-19
Title
Photo Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.5.69
CVSS
7.1 (high)
Published
2021-02-23
Title
Photo Gallery by 10web < 1.5.69 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.5.69
CVSS
4.7 (medium)
Published
2021-02-03
Title
Photo Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.5.68
CVSS
7.1 (high)
Published
2020-05-15
Title
Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.5.55
CVSS
10.0 (critical)
Published
2020-02-25
Title
Photo Gallery < 1.5.46 - Multiple Cross-Site Scripting (XSS) Issues
Fixed in
Fixed in 1.5.46
CVSS
4.8 (medium)
Published
2019-09-08
Title
Photo Gallery by 10Web < 1.5.35 - SQL Injection & XSS
Fixed in
Fixed in 1.5.35
CVSS
9.8 (critical)
Published
2019-07-26
Title
Photo Gallery by 10Web <= 1.5.30 - SQL Injection
Fixed in
Fixed in 1.5.31
CVSS
9.8 (critical)
Published
2019-05-15
Title
Photo Gallery by 10Web <= 1.5.24 - Authenticated LFI
Fixed in
Fixed in 1.5.25
CVSS
4.9 (medium)
Published
2019-05-13
Title
Photo Gallery by 10Web <= 1.5.22 - Authenticated XSS
Fixed in
Fixed in 1.5.23
CVSS
5.4 (medium)
Published
2018-02-22
Title
Photo Gallery by WD <= 1.3.66 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.3.67
CVSS
n/a
Published
2017-08-20
Title
Photo Gallery by WD <= 1.3.50 - Authenticated SQL Injection
Fixed in
Fixed in 1.3.51
CVSS
7.2 (high)
Published
2017-06-16
Title
Photo Gallery by WD <= 1.3.42 - Authenticated Path Traversal
Fixed in
Fixed in 1.3.43
CVSS
n/a
Published
2017-05-02
Title
Photo Gallery by WD <= 1.3.35 - Authenticated SQL Injection
Fixed in
Fixed in 1.3.36
CVSS
n/a
Published
2015-03-19
Title
Photo Gallery < 1.2.13 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.2.13
CVSS
5.4 (medium)
Published
2015-02-12
Title
Photo Gallery <= 1.2.5 - Unrestricted File Upload
Fixed in
Fixed in 1.2.6
CVSS
8.8 (high)
Published
2015-01-28
Title
Photo Gallery < 1.2.11 - Blind SQL Injection
Fixed in
Fixed in 1.2.11
CVSS
n/a
Published
2015-01-28
Title
Photo Gallery < 1.2.11 - Multiple Authenticated Reflected XSS
Fixed in
Fixed in 1.2.11
CVSS
5.4 (medium)
Published
2015-01-12
Title
Photo Gallery <= 1.2.7 - Unauthenticated SQL injection
Fixed in
Fixed in 1.2.8
CVSS
n/a
Published
2014-10-01
Title
Photo Gallery 1.1.30 - Cross Site Scripting
Fixed in
Fixed in 1.1.31
CVSS
n/a
Published
2014-05-07
Title
Photo-Gallery <= 1.2.41 - UploadHandler.php File Upload CSRF
Fixed in
Fixed in 1.2.42
CVSS
8.8 (high)