WordPress Plugin Vulnerabilities | Page 28 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-03-26

Title

Photo Gallery by 10Web < 1.8.22 - Multiple Reflected XSS

Slug

Published

2024-05-27

Title

Photo Gallery by 10Web < 1.8.26 - Subscriber+ Notice Dismiss

Slug

Published

2024-09-18

Title

Photo Gallery by 10Web <= 1.8.27 - Admin+ Stored XSS

Slug

Published

2024-09-23

Title

Photo Gallery by 10Web < 1.8.28 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

Published

2024-08-06

Title

Photo Gallery by 10Web < 1.8.29 - Admin+ Stored XSS

Slug

Published

2024-11-04

Title

Photo Gallery by 10Web < 1.8.31 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

Published

2024-11-08

Title

Photo Gallery by 10Web < 1.8.31 - Admin+ Stored XSS

Slug

Published

2025-03-02

Title

Photo Gallery by 10Web < 1.8.33 - Admin+ Stored XSS

Slug

Published

2025-03-10

Title

Photo Gallery < 1.8.34 - Unauthenticated Stored XSS

Slug

Published

2025-04-11

Title

Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.35 Reflected Cross-Site Scripting via 'image_id' Parameter

Slug

Published

2026-01-21

Title

Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.37 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion

Slug

Published

2025-12-25

Title

Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.39 - Authenticated (Editor+) Stored Cross-Site Scripting

Slug

Published

2026-02-08

Title

Photo Gallery by 10Web < 1.8.38 - Cross-Site Request Forgery

Slug

Published

2026-05-27

Title

Photo Gallery by 10Web < 1.8.41 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute

Slug

Published

2026-06-04

Title

Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.42 - Authenticated (Contributor+) SQL Injection

Slug

Published

2026-06-05

Title

Photo Gallery by 10Web < 1.8.42 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter

Slug

Published

2026-08-31

Title

Photo Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged Parameters

Slug

photo-gallery-builder

Published

2024-10-17

Title

Photo Gallery Builder <= 3.0 - Missing Authorization

Slug

photo-gallery-pearlbells

Published

2025-02-24

Title

Photo Gallery ( Responsive ) <= 4.0 - Cross-Site Request Forgery to Privilege Escalation

Slug

photo-gallery-portfolio

Published

2025-06-08

Title

WordPress Photo Gallery <= 1.1.0 - Reflected Cross-Site Scripting

Slug

photo-image-gallery

Published

2025-02-21

Title

WordPress Photo Gallery – Image Gallery <= 2.0.4 - Reflected Cross-Site Scripting

Slug

Published

2026-07-07

Title

Photo Swipe <= 4.1.1.1 - Author+ Stored XSS via title Attribute

Slug

photo-video-gallery-master

Published

2024-06-18

Title

Photo Video Gallery Master <= 1.5.3 - Authenticated (Contributor+) PHP Object Injection

Slug

photo-video-store

Published

2024-11-28

Title

Photo Video Store <= 21.07 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Slug

photo-video-store

Published

2025-01-16

Title

Photo Video Store <= 21.07 - Reflected Cross-Site Scripting