CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

236 matches found

Patchstack•added 2026/01/26 7:1 p.m.•8 views

WordPress Meta-box GalleryMeta plugin <= 3.0.1 - Missing Authorization to Authenticated (Author+) Gallery Management vulnerability

Missing Authorization to Authenticated Author+ Gallery Management vulnerability discovered by Kazuma Matsumoto - GMO Cybersecurity by IERAE, Inc. in WordPress Plugin Meta-box GalleryMeta versions = 3.0.1...

4.3CVSS5.9AI score0.00193EPSS

Exploits0References1Affected Software1

Patchstack•added 2026/01/19 9:52 p.m.•4 views

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery Management vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Gallery Management vulnerability discovered by WordFence in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.9...

5.4CVSS5.5AI score0.00188EPSS

Exploits0References1Affected Software1

Cvelist•added 2025/12/19 9:29 a.m.•23 views

CVE-2025-14455 Image Photo Gallery Final Tiles Grid <= 3.6.7 - Missing Authorization to Authenticated (Contributor+) Gallery Management

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.7. This is due to the plugin not properly verifying that a user is authorized to perform actions on gallery management functions. This makes it possible fo...

5.4CVSS0.00251EPSS

Exploits0References5

CVE•added 2025/12/19 9:29 a.m.•15 views

CVE-2025-14455

CVE-2025-14455 affects Image Photo Gallery Final Tiles Grid for WordPress. Public details in Wordfence report show an authenticated-by-design authorization bypass (Contributor+ and above) for gallery management actions, enabling deletion/modification/cloning of any user galleries. A fix exists in...

5.4CVSS5.5AI score0.00251EPSS

Exploits0References5

CNNVD•added 2025/12/19 12:0 a.m.•5 views

WordPress plugin Image Photo Gallery Final Tiles Grid 安全漏洞

...

5.4CVSS5.8AI score0.00251EPSS

Exploits0References6

Positive Technologies•added 2025/12/02 12:0 a.m.•4 views

PT-2025-48649

The Photo Gallery by Ays plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.4.8. This is due to missing nonce verification on the bulk action functionality in the 'process bulk action' function. This makes it possible for unauthenticated...

4.3CVSS5.5AI score0.00135EPSS

Exploits0References5