WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gallery-for-ultimate-member
Published
2024-12-11
Title
Video & Photo Gallery for Ultimate Member < 1.1.2 - Reflected Cross-Site Scripting
Slug
gallery-for-ultimate-member
Published
2024-12-11
Title
Video & Photo Gallery for Ultimate Member < 1.1.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
gallery-for-ultimate-member
Published
2025-02-03
Title
Video & Photo Gallery for Ultimate Member < 1.1.3 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
gallery-for-ultimate-member
Published
2025-04-04
Title
Video & Photo Gallery for Ultimate Member <= 1.1.3 - Authenticated (Administrator+) SQL Injection
Slug
gallery-from-files
Published
2021-05-26
Title
Gallery From Files <= 1.6.0 - Unauthenticated RCE
Slug
gallery-from-files
Published
2021-05-26
Title
Gallery From Files <= 1.6.0 - Reflected Cross-Site Scripting (XSS)
Slug
gallery-image-gallery-photo
Published
2022-06-03
Title
Image Gallery - Grid Gallery < 1.1.6 - Admin+ Stored Cross-Site Scripting
Slug
gallery-images
Published
2014-10-11
Title
Huge IT Image Gallery 1.0.1 - SQL Injection
Slug
gallery-images
Published
2015-08-20
Title
Huge IT Image Gallery < 1.5.6 - Authenticated Cross-Site Scripting (XSS)
Slug
gallery-images
Published
2016-02-08
Title
Huge IT Image Gallery <= 1.7.0 - Reflected Cross-Site Scripting (XSS)
Slug
gallery-images
Published
2016-11-23
Title
Huge IT Image Gallery <= 2.0.5 - Stored Cross-Site Scripting (XSS)
Slug
gallery-images
Published
2016-05-20
Title
Huge IT Image Gallery < 1.9.0 - Unauthenticated SQL Injection
Slug
gallery-images-ape
Published
2019-12-30
Title
Photo Gallery – Image Gallery by Ape <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation
Slug
gallery-images-ape
Published
2022-10-31
Title
Gallery Images Ape <= 2.2.8 - Contributor+ Stored XSS
Slug
gallery-images-ape
Published
2025-01-03
Title
Gallery Images Ape <= 2.2.8 - Reflected Cross-Site Scripting
Slug
gallery-lightbox-slider
Published
2024-09-30
Title
Gallery Lightbox < 1.0.0.41 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
gallery-lightbox-slider
Published
2025-09-22
Title
Gallery Lightbox <= 1.0.0.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gallery-metabox
Published
2023-04-19
Title
Gallery Metabox <= 1.5 - Gallery Removal via CSRF
Slug
gallery-metabox
Published
2023-06-22
Title
Gallery Metabox <= 1.5 - Subscriber+ Unauthorized Data Access
Slug
gallery-objects
Published
2014-09-19
Title
Gallery Objects <= 0.4 - SQL Injection
Slug
gallery-photo-gallery
Published
2016-07-11
Title
Gallery Photo Gallery < 1.0.1 - SQL Injection
Slug
gallery-photo-gallery
Published
2021-06-29
Title
Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injections
Slug
gallery-photo-gallery
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Slug
gallery-photo-gallery
Published
2023-05-16
Title
Photo Gallery by Ays < 5.1.7 - Reflected XSS
Slug
gallery-photo-gallery
Published
2023-08-18
Title
Photo Gallery by Ays < 5.1.4 - Reflected XSS