PT-2025-32485 · Unknown · Simple Art Gallery

Name of the Vulnerable Software and Affected Versions: Simple Art Gallery version 1.0 Description: A critical vulnerability exists in Simple Art Gallery 1.0 due to a SQL injection flaw. The issue is located in an unknown functionality within the /Admin/registration.php file. The fname argument ca...

WordPress Global Gallery Plugin <= 9.2.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Global Gallery versions = 9.2.3...

CVE-2025-54611

EXTRAREFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54611

EXTRAREFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54611

EXTRAREFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54611

EXTRAREFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54611

CVE-2025-54611 is a resource read vulnerability in the Gallery module stemming from an improper EXTRA_REFERRER read. Affected component: Gallery module (no explicit vendor/version in the connected docs beyond Huawei context). Impact: confidentiality risk if exploited (local access with LOW comple...

PT-2025-32018 · WordPress · Gallery Module

Name of the Vulnerable Software and Affected Versions: Gallery module affected versions not specified Description: A resource read vulnerability exists in the Gallery module related to the EXTRA REFERRER. Successful exploitation of this issue may affect service confidentiality. Recommendations: A...

CVE-2025-8400

CVE-2025-8400 concerns the Image Gallery WordPress plugin (Bee-Quick-Gallery) with a reflected Cross-Site Scripting vulnerability. The issue affects all versions up to 1.0.0 due to insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject scripts that execu...

CVE-2025-8400 Image Gallery <= 1.0.0 - Reflected Cross-Site Scripting

The Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...

CVE-2025-8400 Image Gallery <= 1.0.0 - Reflected Cross-Site Scripting

The Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...

PT-2025-31732 · WordPress · Image Gallery

Name of the Vulnerable Software and Affected Versions: Image Gallery plugin for WordPress versions prior to 1.0.1 Description: The Image Gallery plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows...

SourceCodester Online Hotel Reservation System 注入漏洞

SourceCodester Online Hotel Reservation System is a SourceCodester open source online hotel system. An injection vulnerability exists in SourceCodester Online Hotel Reservation System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

WordPress plugin Image Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress plugin Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Contest Gallery plugin <= 26.1.0 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Contest Gallery versions = 26.1.0...

WordPress Pixel Gallery Addons for Elementor plugin cross-site scripting vulnerability

WordPress Pixel Gallery Addons for Elementor plugin is a visual page builder plugin for WordPress platform, designed for Elementor, mainly used to create responsive image/video display features. The WordPress Pixel Gallery Addons for Elementor plugin suffers from a cross-site scripting...

Art Gallery Management System edit-art-medium-detail.php File Cross-Site Scripting Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System has a cross-site scripting vulnerability , the vulnerability stems from the /admin/edit-art-medium-detail.php file artmed parameter for the user to provide data lack of effective filtering and escapin...

CVE-2025-7644

The Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via URLs in all widgets in all versions up to, and including, 1.6.7 due to insufficient input...

CVE-2025-7644 Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via URLs in all widgets in all versions up to, and including, 1.6.7 due to insufficient input...