Information disclosure

The WP Customer Reviews plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.6.6 via the ajaxenabledposts function. This can allow authenticated attackers to extract sensitive data such as post titles and slugs, including those of protected and...

CVE-2023-5583

CVE-2023-5583 affects WP Simple Galleries for WordPress (≤ v1.34). The vulnerability is a PHP Object Injection via deserialization of untrusted input from the wpsimplegallery_gallery post meta through the wpsgallery shortcode. It requires contributor-level permissions or higher and could enable a...

WordPress Plugin WP Simple Galleries Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress WP Simple Galleries Plugin <= 1.34 is vulnerable to PHP Object Injection

Software WP Simple Galleries Type Plugin Vulnerable versions = 1.34 Fixed in N/A OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2023-5583 Patch priority Low CVSS severity Low 8.8 Developer Claim ownership PSID fbbcc5df46bc Credits István Márton Required privilege Contribut...

nationalgalleries.org Cross Site Scripting vulnerability OBB-3765325

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Plugin Taggbox - UGC Galleries, Social Media Widgets, User Reviews & Analytics Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Taggbox -...

CVE-2021-4384

The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the loadimagesthumbnail and editgallery functions. This makes it possible for unauthenticat...

Cross site request forgery (csrf)

The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the loadimagesthumbnail and editgallery functions. This makes it possible for unauthenticat...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...

WordPress Galleries by Angie Makes Plugin <= 1.67 is vulnerable to Cross Site Scripting (XSS)

Software Galleries by Angie Makes Type Plugin Vulnerable versions = 1.67 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4795 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID c4b62d67a4b8 Credits Lana Codes...

CVE-2022-4795

The Galleries by Angie Makes WordPress plugin through 1.67 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting atta...

CVE-2022-4795

The Galleries by Angie Makes WordPress plugin through 1.67 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting atta...

Cross site scripting

The Galleries by Angie Makes WordPress plugin through 1.67 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting atta...

CVE-2022-4795 Galleries by Angie Makes <= 1.67 - Contributor+ Stored XSS via Shortcode

The Galleries by Angie Makes WordPress plugin through 1.67 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting atta...

CVE-2022-4795

CVE-2022-4795 concerns the WordPress plugin Galleries by Angie Makes (versions

WordPress plugin Galleries by Angie Makes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

SUSE CVE-2022-3655

Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

Galleries by Angie Makes <= 1.67 - Contributor+ Stored XSS via Shortcode

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks gallery ids='1' captions="'...

Buffer Overflow

chromium is vulnerable to heap-based buffer overflow. The vulnerability exists in Media Galleries in Google Chrome which allows an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

The vulnerability in the interface for accessing the chrome.mediaGalleries media gallery in Google Chrome and Microsoft Edge browsers allows a attacker to cause a service failure.

The vulnerability of the interface for accessing the chrome.mediaGalleries media gallery in Google Chrome and Microsoft Edge browsers is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially creat...