WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
photo-gallery-pearlbells
Published
2025-02-24
Title
Photo Gallery ( Responsive ) <= 4.0 - Cross-Site Request Forgery to Privilege Escalation
Slug
photo-gallery-portfolio
Published
2025-06-08
Title
WordPress Photo Gallery <= 1.1.0 - Reflected Cross-Site Scripting
Slug
photo-image-gallery
Published
2025-02-21
Title
WordPress Photo Gallery – Image Gallery <= 2.0.4 - Reflected Cross-Site Scripting
Slug
photo-video-gallery-master
Published
2024-06-18
Title
Photo Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection
Slug
photo-video-store
Published
2024-11-28
Title
Photo Video Store <= 21.07 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
photo-video-store
Published
2025-01-16
Title
Photo Video Store <= 21.07 - Reflected Cross-Site Scripting
Slug
photoblocks-grid-gallery
Published
2019-07-05
Title
Gallery Photoblocks < 1.1.41 - Unauthenticated Reflected XSS
Slug
photoblocks-grid-gallery
Published
2019-07-09
Title
Gallery Photoblocks < 1.1.43 - Authenticated Reflected XSS
Slug
photoblocks-grid-gallery
Published
2020-07-29
Title
Gallery PhotoBlocks < 1.2.0 - Authenticated Cross-Site Scripting (XSS)
Slug
photoblocks-grid-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
photoblocks-grid-gallery
Published
2022-08-10
Title
Gallery PhotoBlocks < 1.2.9 - Cross-Site Request Forgery
Slug
photoblocks-grid-gallery
Published
2022-08-10
Title
Gallery PhotoBlocks < 1.2.7 - Contributor+ Stored XSS
Slug
photoblocks-grid-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
photoblocks-grid-gallery
Published
2025-09-03
Title
Gallery PhotoBlocks < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photoblocks-grid-gallery
Published
2026-01-26
Title
Gallery PhotoBlocks < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photofade
Published
2026-01-06
Title
PhotoFade <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
photographer-connections
Published
2024-11-08
Title
Photographer Connections <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photographer-directory
Published
2023-03-06
Title
Multiple e-plugins - Subscriber+ Privilege Escalation
Slug
photographers-galleries
Published
2025-10-21
Title
Photographers galleries <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photography-portfolio
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
photokit
Published
2024-10-17
Title
photokit <= 1.0 - Unauthenticated Arbitrary File Upload
Slug
photonic
Published
2025-11-17
Title
Photonic Gallery & Lightbox for Flickr, SmugMug & Others < 3.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via Caption Attribute
Slug
photoracer
Published
2014-08-01
Title
Photoracer 1.0 - (id) SQL Injection
Slug
photoracer
Published
2014-08-01
Title
Photoracer <= 1.0 - SQL Injection
Slug
photoracer
Published
2014-08-01
Title
Photoracer <= 1.0 - Multiple Vulnerabilities