WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contest-gallery
Published
2026-10-19
Title
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 34.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
contest-gallery
Published
2026-10-08
Title
Contest Gallery < 33.0.1 - Unauthenticated Email Verification Bypass via Brute-Forceable Registration PIN
Slug
contest-gallery
Published
2026-10-19
Title
Contest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter Identity
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery Pro < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Admin+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5.1 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5.1 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Unauthenticated SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5 - Author+ SQL Injection
Slug
contest-gallery-pro
Published
2022-12-05
Title
Contest Gallery < 19.1.5.1 - Unauthenticated SQL Injection
Slug
contest-gallery-pro
Published
2026-05-17
Title
Contest Gallery Pro < 29.0.2 - Unauthenticated Privilege Escalation
Slug
contests-from-rewards-fuel
Published
2024-03-19
Title
Contests by Rewards Fuel < 2.0.63 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
contests-from-rewards-fuel
Published
2024-03-19
Title
Contests by Rewards Fuel < 2.0.65 - Authenticated (Contributor+) Stored Cross-Site Scripting via update_rewards_fuel_api_key
Slug
contests-from-rewards-fuel
Published
2024-12-17
Title
Contests by Rewards Fuel < 2.0.66 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
contexto
Published
2025-01-16
Title
Contexto <= 1.0 - Reflected Cross-Site Scripting