Lucene search
K

30 matches found

Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.1 views

CVE-2026-39510 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through = 3.6.11...

5.8AI score0.00033EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/02/20 1:26 p.m.3 views

CVE-2026-25375

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through = 3.6.10...

4.3CVSS5.5AI score0.00053EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-46151

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00051EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:9 a.m.8 views

CVE-2024-1664

The Responsive Gallery Grid WordPress plugin before 2.3.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

6.1CVSS5.6AI score0.00398EPSS
Exploits2References1
OSV
OSV
added 2025/05/15 8:15 p.m.1 views

CVE-2024-4091

The Responsive Gallery Grid WordPress plugin before 2.3.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

3.5CVSS5.8AI score0.00166EPSS
Exploits1References1
NVD
NVD
added 2025/05/15 8:15 p.m.7 views

CVE-2024-4091

The Responsive Gallery Grid WordPress plugin before 2.3.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

3.5CVSS0.00166EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/05/15 8:9 p.m.11 views

CVE-2024-4091 Responsive Gallery Grid < 2.3.15 - Admin+ Stored XSS

The Responsive Gallery Grid WordPress plugin before 2.3.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

0.00166EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/05/15 8:9 p.m.7 views

CVE-2024-4091 Responsive Gallery Grid < 2.3.15 - Admin+ Stored XSS

The Responsive Gallery Grid WordPress plugin before 2.3.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

5.7AI score0.00166EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.1 views

WordPress plugin Responsive Gallery Grid 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...

3.5CVSS6AI score0.00166EPSS
Exploits1References1
Patchstack
Patchstack
added 2024/04/11 10:56 a.m.2 views

Wordpress Responsive Gallery Grid plugin < 2.3.11 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by WPScan in WordPress Plugin Responsive Gallery Grid versions 2.3.11...

6.1CVSS6.1AI score0.00398EPSS
Exploits2References1Affected Software1
Patchstack
Patchstack
added 2024/04/11 12:0 a.m.10 views

WordPress Responsive Gallery Grid Plugin < 2.3.11 is vulnerable to Cross Site Scripting (XSS)

Software Responsive Gallery Grid Type Plugin Vulnerable versions 2.3.11 Fixed in 2.3.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1664 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 64e1e4491d20 Credits WPScan Required...

6.1CVSS5.7AI score0.00398EPSS
Exploits2References3Affected Software1
OSV
OSV
added 2024/04/09 5:15 a.m.1 views

CVE-2024-1664

The Responsive Gallery Grid WordPress plugin before 2.3.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

6.1CVSS7.3AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/09 5:0 a.m.13 views

CVE-2024-1664 Responsive Gallery Grid < 2.3.11 - Admin+ Stored XSS

The Responsive Gallery Grid WordPress plugin before 2.3.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.6AI score0.00398EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/04/09 5:0 a.m.14 views

CVE-2024-1664 Responsive Gallery Grid < 2.3.11 - Admin+ Stored XSS

The Responsive Gallery Grid WordPress plugin before 2.3.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.5AI score0.00398EPSS
Exploits2References1
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.1 views

WordPress Plugin Responsive Gallery Grid 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS7.6AI score0.00398EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2024/04/08 12:0 a.m.3 views

PT-2024-18209 · WordPress · Responsive Gallery Grid

Name of the Vulnerable Software and Affected Versions: Responsive Gallery Grid WordPress plugin versions prior to 2.3.11 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for...

6.1CVSS7.9AI score0.00398EPSS
Exploits2References6
WPVulnDB
WPVulnDB
added 2023/10/10 12:0 a.m.9 views

Responsive Gallery Grid <= 2.3.10 - Settings Update via CSRF

Description The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

8.8CVSS6.4AI score0.00051EPSS
Exploits0
OSV
OSV
added 2023/10/06 3:15 p.m.1 views

CVE-2023-41659

Cross-Site Request Forgery CSRF vulnerability in Jules Colle, BDWM Responsive Gallery Grid plugin = 2.3.10 versions...

8.8CVSS7.3AI score0.00051EPSS
Exploits0References1
NVD
NVD
added 2023/10/06 3:15 p.m.8 views

CVE-2023-41659

Cross-Site Request Forgery CSRF vulnerability in Jules Colle, BDWM Responsive Gallery Grid plugin = 2.3.10 versions...

8.8CVSS6.5AI score0.00051EPSS
Exploits0References1
Prion
Prion
added 2023/10/06 3:15 p.m.11 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Jules Colle, BDWM Responsive Gallery Grid plugin = 2.3.10 versions...

6.8CVSS8.8AI score0.00051EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder