Lucene search
+L

11746 matches found

NVD
NVD
added 2026/01/22 5:15 p.m.10 views

CVE-2025-53240

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in adamlabs WordPress Photo Gallery photo-gallery-portfolio allows Reflected XSS.This issue affects WordPress Photo Gallery: from n/a through = 1.1.0...

7.1CVSS0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:15 p.m.11 views

CVE-2025-49049

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ZoomIt DZS Video Gallery dzs-videogallery allows SQL Injection.This issue affects DZS Video Gallery: from n/a through = 12.39...

8.5CVSS0.00401EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.27 views

CVE-2026-24389

CVE-2026-24389 concerns the WordPress Gallery PhotoBlocks plugin (photoblocks-grid-gallery). Public sources confirm a Cross-Site Scripting (DOM-based) vulnerability in Gallery PhotoBlocks versions up to 1.3.2, arising from improper input neutralization during web page generation. Exploitation cou...

6.5CVSS5.4AI score0.00132EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.5 views

CVE-2026-24389 WordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows DOM-Based XSS.This issue affects Gallery PhotoBlocks: from n/a through = 1.3.2...

6.5CVSS5.9AI score0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.30 views

CVE-2026-24389 WordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows DOM-Based XSS.This issue affects Gallery PhotoBlocks: from n/a through = 1.3.2...

6.5CVSS0.00132EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.6 views

CVE-2026-24389

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows DOM-Based XSS.This issue affects Gallery PhotoBlocks: from n/a through = 1.3.2...

6.5CVSS5.3AI score0.00132EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.5 views

CVE-2026-23976 WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through = 2.13.4...

5.9CVSS5.9AI score0.00174EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.9 views

CVE-2026-23976

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through = 2.13.4...

7.1CVSS5.3AI score0.00174EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/22 4:52 p.m.23 views

CVE-2026-23976

CVE-2026-23976 relates to the WordPress plugin Modula Image Gallery (modula-best-grid-gallery). The vulnerability is a stored XSS caused by improper neutralization of input during web page generation in versions up to 2.13.4. According to Wordfence and related sources, exploitation requires an au...

5.9CVSS5.4AI score0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.31 views

CVE-2026-23976 WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through = 2.13.4...

5.9CVSS0.00174EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.4 views

CVE-2025-53240

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in adamlabs WordPress Photo Gallery photo-gallery-portfolio allows Reflected XSS.This issue affects WordPress Photo Gallery: from n/a through = 1.1.0...

6.1CVSS5.3AI score0.00274EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.39 views

CVE-2025-53240 WordPress WordPress Photo Gallery plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in adamlabs WordPress Photo Gallery photo-gallery-portfolio allows Reflected XSS.This issue affects WordPress Photo Gallery: from n/a through = 1.1.0...

7.1CVSS0.00274EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.3 views

CVE-2025-53240 WordPress WordPress Photo Gallery plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in adamlabs WordPress Photo Gallery photo-gallery-portfolio allows Reflected XSS.This issue affects WordPress Photo Gallery: from n/a through = 1.1.0...

7.1CVSS5.9AI score0.00274EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:51 p.m.13 views

CVE-2025-53240

CVE-2025-53240 describes a Cross-Site Scripting (XSS) vulnerability in the WordPress Photo Gallery plugin (photo-gallery-portfolio). Affected: WordPress Photo Gallery plugin versions through 1.1.0; vulnerable component/file: photo-gallery-portfolio functionality. Root cause: improper handling of ...

7.1CVSS5.4AI score0.00274EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.2 views

CVE-2025-49049

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ZoomIt DZS Video Gallery dzs-videogallery allows SQL Injection.This issue affects DZS Video Gallery: from n/a through = 12.37...

8.8CVSS5.6AI score0.00401EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.29 views

CVE-2025-49049 WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ZoomIt DZS Video Gallery dzs-videogallery allows SQL Injection.This issue affects DZS Video Gallery: from n/a through = 12.39...

8.5CVSS0.00401EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:51 p.m.25 views

CVE-2025-49049

CVE-2025-49049 affects WordPress DZS Video Gallery plugin (dzs-videogallery) up to version 12.37. The vulnerability is an SQL Injection due to improper neutralization of input in the plugin. Multiple sources confirm the issue and affected range, but none in the connected docs provide a patch/fix;...

8.5CVSS5.9AI score0.00401EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.3 views

CVE-2025-49049 WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ZoomIt DZS Video Gallery dzs-videogallery allows SQL Injection.This issue affects DZS Video Gallery: from n/a through = 12.39...

8.5CVSS5.9AI score0.00401EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.14 views

WordPress plugin Gallery PhotoBlocks has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.5CVSS5.7AI score0.00132EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.16 views

PT-2026-4272

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows DOM-Based XSS.This issue affects Gallery PhotoBlocks: from n/a through = 1.3.2...

5.4AI score0.00132EPSS
SaveExploits0References2
Rows per page
Query Builder