WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
photoblocks-grid-gallery
Published
2019-07-05
Title
Gallery Photoblocks < 1.1.41 - Unauthenticated Reflected XSS
Slug
photoblocks-grid-gallery
Published
2019-07-09
Title
Gallery Photoblocks < 1.1.43 - Authenticated Reflected XSS
Slug
photoblocks-grid-gallery
Published
2020-07-29
Title
Gallery PhotoBlocks < 1.2.0 - Authenticated Cross-Site Scripting (XSS)
Slug
photoblocks-grid-gallery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
photoblocks-grid-gallery
Published
2022-08-10
Title
Gallery PhotoBlocks < 1.2.9 - Cross-Site Request Forgery
Slug
photoblocks-grid-gallery
Published
2022-08-10
Title
Gallery PhotoBlocks < 1.2.7 - Contributor+ Stored XSS
Slug
photoblocks-grid-gallery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
photoblocks-grid-gallery
Published
2025-09-03
Title
Gallery PhotoBlocks < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photoblocks-grid-gallery
Published
2026-01-26
Title
Gallery PhotoBlocks < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photoblocks-grid-gallery
Published
2026-07-27
Title
Gallery PhotoBlocks < 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photoblocks-grid-gallery
Published
2026-09-02
Title
Gallery PhotoBlocks < 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photocart-link
Published
2026-06-15
Title
Photocart Link <= 1.6 - Unauthenticated Local File Inclusion
Slug
photofade
Published
2026-01-06
Title
PhotoFade <= 0.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
photographer-connections
Published
2024-11-08
Title
Photographer Connections <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photographer-directory
Published
2023-03-06
Title
Multiple e-plugins - Subscriber+ Privilege Escalation
Slug
photographers-galleries
Published
2025-10-21
Title
Photographers galleries <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photography-portfolio
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
photokit
Published
2024-10-17
Title
photokit <= 1.0 - Unauthenticated Arbitrary File Upload
Slug
photonic
Published
2025-11-17
Title
Photonic Gallery & Lightbox for Flickr, SmugMug & Others < 3.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via Caption Attribute
Slug
photonic
Published
2026-07-27
Title
Photonic Gallery & Lightbox for Flickr, SmugMug & Others < 3.34 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photoracer
Published
2014-08-01
Title
Photoracer 1.0 - (id) SQL Injection
Slug
photoracer
Published
2014-08-01
Title
Photoracer <= 1.0 - SQL Injection
Slug
photoracer
Published
2014-08-01
Title
Photoracer <= 1.0 - Multiple Vulnerabilities
Slug
photoshelter-official-plugin
Published
2025-04-01
Title
PhotoShelter for Photographers Blog Feed Plugin <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
photoshow
Published
2024-06-22
Title
Smart Image Gallery < 1.0.19 - Update/Delete Google API Key via CSRF