782 matches found
WordPress SimpLy Gallery plugin <= 3.3.2.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin SimpLy Gallery versions = 3.3.2.1...
EUVD-2025-35326
The WP AD Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'startindex' parameter of the ad-gallery shortcode in all versions up to, and including, 1.3. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
EUVD-2017-18923
The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...
CVE-2017-20207
The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...
PT-2025-42675
Name of the Vulnerable Software and Affected Versions Flickr Gallery plugin for WordPress versions up to and including 1.5.2 Description The software is susceptible to PHP Object Injection due to deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to...
CVE-2025-11254
CVE-2025-11254 affects the WordPress plugin “Contest Gallery – Upload, Vote & Sell with PayPal and Stripe” (versions up to 27.0.3). The vulnerability is CSV Injection in gallery submissions that allows unauthenticated input to be embedded in exported CSVs, enabling code execution when the CSV is ...
CVE-2025-11254 Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injection
The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 27.0.3 via gallery submissions. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which c...
CVE-2025-9710
The Responsive Lightbox & Gallery WordPress plugin before 2.5.3 does not properly handle HTML tag attributes modifications, potentially allowing unauthenticated attackers to abuse the functionality to include event handlers and conduct Stored XSS attacks...
EUVD-2015-1911
Malware in sbrugna...
EUVD-2015-2417
Malware in sbrugna...
EUVD-2017-5637
Malware in sbrugna...
EUVD-2015-1198
Malware in sbrugna...
EUVD-2016-1068
Malware in sbrugna...
EUVD-2018-19307
Malware in sbrugna...
EUVD-2019-5922
Malware in sbrugna...
EUVD-2014-2593
Malware in sbrugna...
EUVD-2014-2370
Malware in sbrugna...
EUVD-2021-11427
Malware in sbrugna...