WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contest-gallery
Published
2025-07-11
Title
Contest Gallery < 26.0.7 - Reflected Cross-Site Scripting
Slug
contest-gallery
Published
2025-07-31
Title
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI < 26.1.1 - Unauthenticated Stored Cross-Site Scripting
Slug
contest-gallery
Published
2025-10-03
Title
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe < 27.0.3 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
contest-gallery
Published
2025-10-10
Title
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe < 28.0.0 - Unauthenticated CSV Injection
Slug
contest-gallery
Published
2025-10-12
Title
Contest Gallery < 28.0.1 - Cross-Site Request Forgery
Slug
contest-gallery
Published
2025-11-14
Title
Contest Gallery < 28.0.3 - Missing Authorization
Slug
contest-gallery
Published
2026-01-09
Title
Contest Gallery < 28.1.2 - Missing Authorization
Slug
contest-gallery
Published
2026-03-02
Title
Contest Gallery < 28.1.5 - Unauthenticated SQL Injection
Slug
contest-gallery
Published
2026-03-10
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 28.1.2.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
contest-gallery
Published
2026-03-23
Title
Contest Gallery < 28.1.6 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion
Slug
contest-gallery
Published
2026-03-23
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 28.1.3 - Missing Authorization
Slug
contest-gallery
Published
2026-04-21
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 28.1.7 - Unauthenticated SQL Injection
Slug
contest-gallery
Published
2026-04-29
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 29.0.0 - Missing Authorization
Slug
contest-gallery
Published
2026-04-29
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 29.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
contest-gallery
Published
2026-04-29
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 29.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
contest-gallery
Published
2026-05-18
Title
Contest Gallery < 28.1.7 - Unauthenticated SQL Injection
Slug
contest-gallery
Published
2026-06-16
Title
Contest Gallery < 30.0.3 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter
Slug
contest-gallery
Published
2026-06-26
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 30.0.1 - Authenticated (Contributor+) SQL Injection
Slug
contest-gallery
Published
2026-07-23
Title
Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library
Slug
contest-gallery
Published
2026-07-27
Title
Contest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts
Slug
contest-gallery
Published
2026-07-27
Title
Contest Gallery < 30.0.7 - Unauthenticated Stored Cross-Site Scripting
Slug
contest-gallery
Published
2026-07-29
Title
Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login
Slug
contest-gallery
Published
2026-08-14
Title
Contest Gallery < 31.0.0 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'
Slug
contest-gallery
Published
2026-08-19
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 30.0.6 - Unauthenticated Stored Cross-Site Scripting
Slug
contest-gallery
Published
2026-09-15
Title
Contest Gallery < 33.0.0 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameter