WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
photo-gallery
Published
2026-01-21
Title
Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.37 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion
Slug
photo-gallery
Published
2025-12-25
Title
Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.39 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
photo-gallery
Published
2026-02-08
Title
Photo Gallery by 10Web < 1.8.38 - Cross-Site Request Forgery
Slug
photo-gallery
Published
2026-05-27
Title
Photo Gallery by 10Web < 1.8.41 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute
Slug
photo-gallery
Published
2026-06-04
Title
Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.42 - Authenticated (Contributor+) SQL Injection
Slug
photo-gallery
Published
2026-06-05
Title
Photo Gallery by 10Web < 1.8.42 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter
Slug
photo-gallery-builder
Published
2024-10-17
Title
Photo Gallery Builder <= 3.0 - Missing Authorization
Slug
photo-gallery-pearlbells
Published
2025-02-24
Title
Photo Gallery ( Responsive ) <= 4.0 - Cross-Site Request Forgery to Privilege Escalation
Slug
photo-gallery-portfolio
Published
2025-06-08
Title
WordPress Photo Gallery <= 1.1.0 - Reflected Cross-Site Scripting
Slug
photo-image-gallery
Published
2025-02-21
Title
WordPress Photo Gallery – Image Gallery <= 2.0.4 - Reflected Cross-Site Scripting
Slug
photo-swipe
Published
2026-07-07
Title
Photo Swipe <= 4.1.1.1 - Author+ Stored XSS via title Attribute
Slug
photo-video-gallery-master
Published
2024-06-18
Title
Photo Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection
Slug
photo-video-store
Published
2024-11-28
Title
Photo Video Store <= 21.07 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
photo-video-store
Published
2025-01-16
Title
Photo Video Store <= 21.07 - Reflected Cross-Site Scripting
Slug
photoblocks-grid-gallery
Published
2019-07-05
Title
Gallery Photoblocks < 1.1.41 - Unauthenticated Reflected XSS
Slug
photoblocks-grid-gallery
Published
2019-07-09
Title
Gallery Photoblocks < 1.1.43 - Authenticated Reflected XSS
Slug
photoblocks-grid-gallery
Published
2020-07-29
Title
Gallery PhotoBlocks < 1.2.0 - Authenticated Cross-Site Scripting (XSS)
Slug
photoblocks-grid-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
photoblocks-grid-gallery
Published
2022-08-10
Title
Gallery PhotoBlocks < 1.2.9 - Cross-Site Request Forgery
Slug
photoblocks-grid-gallery
Published
2022-08-10
Title
Gallery PhotoBlocks < 1.2.7 - Contributor+ Stored XSS
Slug
photoblocks-grid-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
photoblocks-grid-gallery
Published
2025-09-03
Title
Gallery PhotoBlocks < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photoblocks-grid-gallery
Published
2026-01-26
Title
Gallery PhotoBlocks < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photofade
Published
2026-01-06
Title
PhotoFade <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
photographer-connections
Published
2024-11-08
Title
Photographer Connections <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting