Lucene search
+L

96 matches found

Cvelist
Cvelist
added 2026/02/14 8:26 a.m.41 views

CVE-2026-1254 Modula Image Gallery – Photo Grid & Video Gallery <= 2.13.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post/Page Editing

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.6. This is due to the plugin not properly verifying that a user is authorized to modify specific posts before updating them via the REST API...

4.3CVSS0.00177EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/14 12:00 a.m.23 views

PT-2026-8098

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.6. This is due to the plugin not properly verifying that a user is authorized to modify specific posts before updating them via the REST API...

4.3CVSS5.7AI score0.00177EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/14 12:00 a.m.16 views

WordPress plugin Modula Image Gallery – Photo Grid & Video Gallery 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

4.3CVSS5.8AI score0.00177EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/02/13 11:48 p.m.16 views

WordPress Modula Image Gallery - Photo Grid & Video Gallery plugin <= 2.13.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post/Page Editing vulnerability

WordPress Modula Image Gallery - Photo Grid & Video Gallery plugin = 2.13.6 - Missing Authorization to Authenticated Contributor+ Arbitrary Post/Page Editing vulnerability discovered by type5afe in WordPress Plugin Modula Image Gallery versions = 2.13.6...

4.3CVSS5.5AI score0.00177EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/04 7:28 p.m.9 views

CVE-2026-24939

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through = 2.13.6...

4.3CVSS5.3AI score0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/02/04 4:13 a.m.12 views

WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by johska in WordPress Plugin Modula Image Gallery versions = 2.13.4...

7.1CVSS5.2AI score0.00174EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/02/03 3:16 p.m.20 views

CVE-2026-24939

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through = 2.13.6...

4.3CVSS0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/03 2:08 p.m.18 views

CVE-2026-24939

CVE-2026-24939 affects the WordPress plugin Modula Image Gallery (modula-best-grid-gallery) up to and including version 2.13.6. The issue is described as a broken/incorrectly configured access control that may allow unauthorized access due to Missing Authorization. Public sources (PatchStack, Red...

4.3CVSS5.3AI score0.00197EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/03 2:08 p.m.5 views

CVE-2026-24939

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through = 2.13.6...

5.3AI score0.00197EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/02/03 2:08 p.m.8 views

EUVD-2026-5212

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through = 2.13.6...

4.3CVSS5.3AI score0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/03 2:08 p.m.6 views

CVE-2026-24939 WordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through = 2.13.6...

4.3CVSS5.3AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/03 2:08 p.m.35 views

CVE-2026-24939 WordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modula Image Gallery: from n/a through = 2.13.6...

4.3CVSS0.00197EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.14 views

PT-2026-6216

Name of the Vulnerable Software and Affected Versions Modula Image Gallery versions through 2.13.6 Description An authorization issue exists in WP Chill Modula Image Gallery modula-best-grid-gallery. The issue involves incorrectly configured access control security levels, potentially allowing...

4.3CVSS5.4AI score0.00197EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/03 12:00 a.m.18 views

WordPress plugin Modula Image Gallery 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

4.3CVSS7.1AI score0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.20 views

CVE-2026-23976

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through = 2.13.4...

5.9CVSS0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.5 views

CVE-2026-23976 WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through = 2.13.4...

5.9CVSS5.9AI score0.00174EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.9 views

CVE-2026-23976

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through = 2.13.4...

7.1CVSS5.3AI score0.00174EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/22 4:52 p.m.23 views

CVE-2026-23976

CVE-2026-23976 relates to the WordPress plugin Modula Image Gallery (modula-best-grid-gallery). The vulnerability is a stored XSS caused by improper neutralization of input during web page generation in versions up to 2.13.4. According to Wordfence and related sources, exploitation requires an au...

5.9CVSS5.4AI score0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.30 views

CVE-2026-23976 WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through = 2.13.4...

5.9CVSS0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.9 views

PT-2026-4247

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Stored XSS.This issue affects Modula Image Gallery: from n/a through = 2.13.4...

5.4AI score0.00174EPSS
SaveExploits0References2
Rows per page
Query Builder