4 matches found
CVE-2025-14455
The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.7. This is due to the plugin not properly verifying that a user is authorized to perform actions on gallery management functions. This makes it possible fo...
EUVD-2025-204522
The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.7. This is due to the plugin not properly verifying that a user is authorized to perform actions on gallery management functions. This makes it possible fo...
SourceCodester Online Hotel Reservation System 注入漏洞
SourceCodester Online Hotel Reservation System is a SourceCodester open source online hotel system. An injection vulnerability exists in SourceCodester Online Hotel Reservation System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...
CVE-2021-24795
The Filter Portfolio Gallery WordPress plugin through 1.5 is lacking Cross-Site Request Forgery CSRF check when deleting a Gallery, which could allow attackers to make a logged in admin delete arbitrary Gallery...