WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contest-gallery
Published
2024-07-24
Title
Contest Gallery < 23.1.3 - Unauthenticated Stored Cross-Site Scripting
Slug
contest-gallery
Published
2024-08-16
Title
Contest Gallery < 23.1.3 - Unauthenticated Information Exposure
Slug
contest-gallery
Published
2024-11-04
Title
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons < 24.0.4 - Unauthenticated SQL Injection
Slug
contest-gallery
Published
2024-11-27
Title
Contest Gallery < 24.0.8 - Unauthenticated Arbitrary Password Reset
Slug
contest-gallery
Published
2024-12-30
Title
Contest Gallery < 24.0.4 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
contest-gallery
Published
2025-01-31
Title
Contest Gallery < 25.1.2 - Authenticated (Author+) SQL Injection
Slug
contest-gallery
Published
2025-02-27
Title
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons < 26.0.1 - Unauthenticated Stored Cross-Site Scripting
Slug
contest-gallery
Published
2025-05-07
Title
Contest Gallery < 26.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
contest-gallery
Published
2025-07-10
Title
Contest Gallery < 26.0.9 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
contest-gallery
Published
2025-07-11
Title
Contest Gallery < 26.0.7 - Reflected Cross-Site Scripting
Slug
contest-gallery
Published
2025-07-31
Title
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI < 26.1.1 - Unauthenticated Stored Cross-Site Scripting
Slug
contest-gallery
Published
2025-10-03
Title
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe < 27.0.3 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
contest-gallery
Published
2025-10-10
Title
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe < 28.0.0 - Unauthenticated CSV Injection
Slug
contest-gallery
Published
2025-10-12
Title
Contest Gallery < 28.0.1 - Cross-Site Request Forgery
Slug
contest-gallery
Published
2025-11-14
Title
Contest Gallery < 28.0.3 - Missing Authorization
Slug
contest-gallery
Published
2026-01-09
Title
Contest Gallery < 28.1.2 - Missing Authorization
Slug
contest-gallery
Published
2026-03-02
Title
Contest Gallery < 28.1.5 - Unauthenticated SQL Injection
Slug
contest-gallery
Published
2026-03-10
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 28.1.2.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery Pro < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection