CVE-2025-8451 Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘data-gallery-items’ parameter in all versions up to, and including, 6.2.2 due to insufficient input sanitization and output escaping. Thi...

CVE-2025-8451

CVE-2025-8451 — The WordPress plugin Essential Addons for Elementor – Popular Elementor Templates & Widgets (Essential Addons for Elementor Lite) is vulnerable to a DOM-based Stored XSS via the data-gallery-items parameter in all versions up to and including 6.2.2. The issue arises from insuffici...

CVE-2025-8451 Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘data-gallery-items’ parameter in all versions up to, and including, 6.2.2 due to insufficient input sanitization and output escaping. Thi...

PT-2025-33459 · Unknown +1 · Nextgen Gallery +1

Name of the Vulnerable Software and Affected Versions: Assistant for NextGEN Gallery plugin for WordPress versions up to and including 1.0.9 Description: The Assistant for NextGEN Gallery plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation i...

WordPress plugin Vertical scroll slideshow gallery SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

WordPress plugin Assistant for NextGEN Gallery 路径遍历漏洞

The WordPress Assistant for NextGEN Gallery plugin is a WordPress plugin that focuses on migrating the image uploading, processing and album management features of NextGEN Gallery from a website/browser to a desktop application running on a more powerful desktop system. The WordPress Assistant fo...

PT-2025-33448 · WordPress +1 · Essential Addons For Elementor +1

Name of the Vulnerable Software and Affected Versions: Essential Addons for Elementor versions up to and including 6.2.2 Description: The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the...

CVE-2025-52769

Cross-Site Request Forgery CSRF vulnerability in flexostudio flexo-social-gallery flexo-social-gallery allows Cross Site Request Forgery.This issue affects flexo-social-gallery: from n/a through = 1.0006...

Malicious code in takepart-gallery (npm)

The package takepart-gallery was found to contain malicious code...

MAL-2025-34398 Malicious code in takepart-gallery (npm)

The package takepart-gallery was found to contain malicious code...

Malicious code in xd-test-gallery (npm)

The package xd-test-gallery was found to contain malicious code...

MAL-2025-39600 Malicious code in xd-test-gallery (npm)

The package xd-test-gallery was found to contain malicious code...

CVE-2025-52769

CVE-2025-52769 affects the WordPress plugin flexo-social-gallery (versions up to 1.0006). The issue is a Cross-Site Request Forgery (CSRF) vulnerability. Root cause and impact are described in public disclosures, with no publicly documented fix version in the connected sources. Patch/status: the ...

CVE-2025-52769 WordPress flexo-social-gallery Plugin <= 1.0006 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in flexostudio flexo-social-gallery allows Cross Site Request Forgery. This issue affects flexo-social-gallery: from n/a through 1.0006...

CVE-2025-52769 WordPress flexo-social-gallery Plugin <= 1.0006 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in flexostudio flexo-social-gallery flexo-social-gallery allows Cross Site Request Forgery.This issue affects flexo-social-gallery: from n/a through = 1.0006...

WordPress flexo-social-gallery Plugin <= 1.0006 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin flexo-social-gallery versions = 1.0006...

CVE-2025-52721

Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3...

CVE-2025-52721 WordPress Global Gallery Plugin <= 9.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3...

CVE-2025-52721

CVE-2025-52721 concerns the Global Gallery WordPress plugin (versions up to 9.2.3). It describes a Missing Authorization / Broken Access Control vulnerability enabling an unauthorized user to exploit access control misconfigurations. Public sources indicate the affected software is Global Gallery...

CVE-2025-52721

Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3...