WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
gallery-photo-gallery
Published
2023-10-03
Title
Photo Gallery by Ays < 5.2.7 - CSRF
Slug
gallery-photo-gallery
Published
2024-03-25
Title
Photo Gallery by Ays < 5.5.3 - Reflected Cross-Site Scripting
Slug
gallery-photo-gallery
Published
2024-06-28
Title
Photo Gallery by Ays < 5.7.1 - Administrator+ HTML Injection
Slug
gallery-photo-gallery
Published
2025-09-22
Title
Photo Gallery by Ays < 6.3.9 - Contributor+ Stored XSS
Slug
gallery-photo-gallery
Published
2025-12-01
Title
Photo Gallery by Ays < 6.4.9 - Cross-Site Request Forgery to Bulk Actions
Slug
gallery-plugin
Published
2012-06-01
Title
Gallery 3.06 - Unauthenticated File Upload PHP Code Execution
Slug
gallery-plugin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
gallery-plugin
Published
2023-03-27
Title
Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection
Slug
gallery-plugin
Published
2023-03-27
Title
Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting
Slug
gallery-plugin
Published
2025-03-06
Title
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress < 4.7.4 - Authenticated (Administrator+) PHP Object Injection
Slug
gallery-portfolio
Published
2025-12-31
Title
Portfolio Gallery <= 1.4.8 - Missing Authorization
Slug
gallery-slideshow
Published
2024-06-25
Title
Gallery Slideshow <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gallery-styles
Published
2025-03-07
Title
Gallery Styles < 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
gallery-video
Published
2016-05-28
Title
Gallery - Video Gallery <= 1.7.01 - Stored Cross-Site Scripting (XSS)
Slug
gallery-video
Published
2016-11-13
Title
Gallery - Video Gallery <= 2.0.3 - Cross-Site Scripting (XSS) & CSRF
Slug
gallery-videos
Published
2023-02-20
Title
Video Gallery < 1.7.7 - Admin+ Stored XSS
Slug
gallery-videos
Published
2023-10-03
Title
Video Gallery – YouTube Gallery < 2.2.6 - Admin+ SQLi
Slug
gallery-videos
Published
2024-12-05
Title
Video Gallery < 2.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
gallery-videos
Published
2024-12-05
Title
YouTube Gallery and Vimeo Gallery Plugin < 2.4.3 - Authenticated (Administrator+) SQL Injection
Slug
gallery-voting
Published
2025-02-23
Title
Tribulant Gallery Voting < 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
gallery-widget
Published
2025-07-04
Title
Gallery Widget <= 1.2.1 - Authenticated (Contributor+) SQL Injection
Slug
gallery-with-thumbnail-slider
Published
2022-10-27
Title
Gallery with Thumbnail Slider < 6.1 - Contributor+ Stored XSS
Slug
gallery-with-thumbnail-slider
Published
2025-11-19
Title
Multiple Plugins and Themes - Contributor+ DOM-Based Stored XSS via lightGallery Library
Slug
game-review-block
Published
2025-06-12
Title
Game Review Block < 4.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
Slug
game-server-status
Published
2021-09-21
Title
Game Server Status <= 1.0 - Contributor+ SQL Injection