Lucene search
K

115 matches found

RedhatCVE
RedhatCVE
added 2 days ago4 views

CVE-2026-5361

The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4. This is due to insufficient input sanitization in the updategallerydata function and improper output escaping in the galleryinit function. The...

6.4CVSS5.7AI score0.00016EPSS
Exploits0References1
NVD
NVD
added 2026/05/14 5:16 a.m.5 views

CVE-2026-5361

The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4. This is due to insufficient input sanitization in the updategallerydata function and improper output escaping in the galleryinit function. The...

6.4CVSS0.00016EPSS
Exploits0References6
EUVD
EUVD
added 2026/05/14 3:27 a.m.4 views

EUVD-2026-30215

The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4. This is due to insufficient input sanitization in the updategallerydata function and improper output escaping in the galleryinit function. The...

6.4CVSS6AI score0.00016EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/05/14 3:27 a.m.31 views

CVE-2026-5361 Envira Gallery <= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via 'arrows' Parameter

The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4. This is due to insufficient input sanitization in the updategallerydata function and improper output escaping in the galleryinit function. The...

6.4CVSS0.00016EPSS
Exploits0References6
CVE
CVE
added 2026/05/14 3:27 a.m.13 views

CVE-2026-5361

CVE-2026-5361 affects the WordPress plugin Envira Gallery Lite (

6.4CVSS6AI score0.00016EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/14 3:27 a.m.6 views

CVE-2026-5361

The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4. This is due to insufficient input sanitization in the updategallerydata function and improper output escaping in the galleryinit function. The...

6.4CVSS6AI score0.00016EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2026/05/14 3:27 a.m.8 views

CVE-2026-5361 Envira Gallery <= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via 'arrows' Parameter

The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4. This is due to insufficient input sanitization in the updategallerydata function and improper output escaping in the galleryinit function. The...

6.4CVSS6AI score0.00016EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/05/14 12:0 a.m.7 views

PT-2026-40849

The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4. This is due to insufficient input sanitization in the update gallery data function and improper output escaping in the gallery init function. The...

6.4CVSS6AI score0.00016EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/05/14 12:0 a.m.5 views

WordPress plugin Envira Gallery Lite 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.8AI score0.00016EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/08 9:31 a.m.1 views

EUVD-2026-20177

Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through = 3.6.11...

5.9AI score0.00033EPSS
Exploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.0 views

CVE-2026-39510

Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through = 3.6.11...

2.7CVSS0.00033EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.19 views

CVE-2026-39510 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through = 3.6.11...

2.7CVSS0.00033EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.0 views

PT-2026-31138

Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through = 3.6.11...

5.9AI score0.00033EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-11040

Malware in sbrugna...

5.4CVSS5.6AI score0.00162EPSS
Exploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-23247

Malware in sbrugna...

5.4CVSS5.5AI score0.00471EPSS
Exploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-9287

Malware in sbrugna...

6.5CVSS6.5AI score0.00216EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-9285

Malware in sbrugna...

8.8CVSS8.6AI score0.00259EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-9286

Malware in sbrugna...

8.8CVSS8.6AI score0.01588EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-23248

Malware in sbrugna...

5.4CVSS5.6AI score0.00471EPSS
Exploits2References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-40103

Malicious code in bioql PyPI...

8.5CVSS6.5AI score0.00505EPSS
Exploits0References1
Rows per page
Query Builder