CVE-2023-28666

The InPost Gallery WordPress plugin, in versions 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the addinpostgalleryslideitem action, which can only be triggered by an authenticated user...

PT-2023-21887 · WordPress · Inpost Gallery

Name of the Vulnerable Software and Affected Versions: InPost Gallery WordPress plugin versions prior to 2.2.2 Description: The issue is a reflected cross-site scripting vulnerability. It affects the imgurl parameter to the add inpost gallery slide item action and can only be triggered by an...

CVE-2023-0175

The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

PT-2023-16061 · WordPress · Responsive Clients Logo Gallery Plugin

Name of the Vulnerable Software and Affected Versions: The Responsive Clients Logo Gallery Plugin for WordPress versions 1.1.9 and earlier Description: The issue arises from the plugin's failure to validate and escape some of its shortcode attributes before outputting them in a page or post,...

CVE-2022-45804

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...

CVE-2022-45804

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...

CVE-2022-38468

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...

CVE-2022-38468

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...

CVE-2022-45804 WordPress Robo Gallery Plugin <= 3.2.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...

CVE-2022-45804 WordPress Robo Gallery Plugin <= 3.2.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...

CVE-2022-45804

The CVE-2022-45804 entry concerns the Robo Gallery (Rbs Image Gallery) WordPress plugin, version

CVE-2022-38468

CVE-2022-38468 : A CSRF vulnerability in the Imagely WordPress Gallery Plugin – NextGEN Gallery (versions

WordPress plugin Photo Gallery, Images, Slider in Rbs Image Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Books Gallery Plugin <= 4.4.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Books Gallery Type Plugin Vulnerable versions = 4.4.8 Fixed in 4.4.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23705 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID db5a6b5005b4 Credits yuyudhn Required...

CVE-2022-4682

The Lightbox Gallery WordPress plugin before 0.9.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

PT-2023-15063 · WordPress · Gallery Lightbox

Name of the Vulnerable Software and Affected Versions: Lightbox Gallery WordPress plugin versions prior to 0.9.5 Description: The issue concerns the Lightbox Gallery WordPress plugin, which does not properly validate and escape certain shortcode attributes. This could allow users with the...

WordPress plugin Justified Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2022-4142

The WordPress Filter Gallery Plugin WordPress plugin before 0.1.6 does not properly escape the filters passed in the ufggalleryfilters ajax action before outputting them on the page, allowing a high privileged user such as an administrator to inject HTML or javascript to the plugin settings page,...

CVE-2022-4142

The CVE-2022-4142 entry concerns the WordPress Filter Gallery Plugin (before 0.1.6). Affected component: the ufg_gallery_filters AJAX action that does not properly escape user-supplied filters before rendering on the settings page. Root cause: insufficient escaping enables a high-privileged user ...