WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contest-gallery
Published
2025-07-31
Title
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI < 26.1.1 - Unauthenticated Stored Cross-Site Scripting
Slug
contest-gallery
Published
2025-10-03
Title
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe < 27.0.3 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
contest-gallery
Published
2025-10-10
Title
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe < 28.0.0 - Unauthenticated CSV Injection
Slug
contest-gallery
Published
2025-10-12
Title
Contest Gallery < 28.0.1 - Cross-Site Request Forgery
Slug
contest-gallery
Published
2025-11-14
Title
Contest Gallery < 28.0.3 - Missing Authorization
Slug
contest-gallery
Published
2026-01-09
Title
Contest Gallery < 28.1.2 - Missing Authorization
Slug
contest-gallery
Published
2026-03-02
Title
Contest Gallery < 28.1.5 - Unauthenticated SQL Injection
Slug
contest-gallery
Published
2026-03-10
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 28.1.2.2 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
contest-gallery
Published
2026-03-23
Title
Contest Gallery < 28.1.6 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion
Slug
contest-gallery
Published
2026-03-23
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 28.1.3 - Missing Authorization
Slug
contest-gallery
Published
2026-04-21
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 28.1.7 - Unauthenticated SQL Injection
Slug
contest-gallery
Published
2026-04-29
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 29.0.0 - Missing Authorization
Slug
contest-gallery
Published
2026-04-29
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 29.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
contest-gallery
Published
2026-04-29
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 29.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
contest-gallery
Published
2026-05-18
Title
Contest Gallery < 28.1.7 - Unauthenticated SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery Pro < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection