WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contest-gallery
Published
2026-04-29
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 29.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
contest-gallery
Published
2026-04-29
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 29.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
contest-gallery
Published
2026-05-18
Title
Contest Gallery < 28.1.7 - Unauthenticated SQL Injection
Slug
contest-gallery
Published
2026-06-16
Title
Contest Gallery < 30.0.3 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter
Slug
contest-gallery
Published
2026-06-26
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 30.0.1 - Authenticated (Contributor+) SQL Injection
Slug
contest-gallery
Published
2026-07-23
Title
Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library
Slug
contest-gallery
Published
2026-07-27
Title
Contest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts
Slug
contest-gallery
Published
2026-07-27
Title
Contest Gallery < 30.0.7 - Unauthenticated Stored Cross-Site Scripting
Slug
contest-gallery
Published
2026-07-29
Title
Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login
Slug
contest-gallery
Published
2026-08-14
Title
Contest Gallery < 31.0.0 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'
Slug
contest-gallery
Published
2026-08-19
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 30.0.6 - Unauthenticated Stored Cross-Site Scripting
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery Pro < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5.1 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5.1 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection