Lucene search
K

CVE-2026-1302 Meta-box GalleryMeta <= 3.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via Image Caption

🗓️ 24 Jan 2026 08:26:35Reported by WordfenceType 
cvelist
 cvelist
🔗 www.cve.org👁 25 Views

GalleryMeta stored XSS via admin settings up to version 3.0.1; editors on multisite or unfiltered_html-disabled sites.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for CVE-2026-1302
21 Mar 202613:31
githubexploit
ATTACKERKB
CVE-2026-1302
24 Jan 202608:26
attackerkb
Circl
CVE-2026-1302
24 Jan 202610:31
circl
CNNVD
WordPress plugin Meta-box GalleryMeta: Cross-site scripting vulnerability
24 Jan 202600:00
cnnvd
CVE
CVE-2026-1302
24 Jan 202608:26
cve
EUVD
EUVD-2026-4546
24 Jan 202608:26
euvd
NVD
CVE-2026-1302
24 Jan 202609:15
nvd
Patchstack
WordPress Meta-box GalleryMeta plugin <= 3.0.1 - Authenticated (Editor+) Stored Cross-Site Scripting via Image Caption vulnerability
26 Jan 202618:56
patchstack
Positive Technologies
PT-2026-4598
24 Jan 202600:00
ptsecurity
RedhatCVE
CVE-2026-1302
25 Jan 202609:16
redhatcve
Rows per page
[
  {
    "vendor": "shahinurislam",
    "product": "Meta-box GalleryMeta",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.0.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation