857 matches found
CVE-2023-28784
CVE-2023-28784 affects the WordPress plugin Contest Gallery (
CVE-2022-45827
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in GalleryPlugins Video Contest plugin = 3.2 versions...
CVE-2021-46889
The CVE-2021-46889 entry concerns the WordPress Photo Gallery by 10Web plugin prior to version 1.5.69, which is vulnerable to cross-site scripting via the theme_id parameter in the bwg_frontend_data AJAX action. The linked technical detail (CVE-2021-24291) confirms multiple reflected XSS vectors ...
WordPress Plugin photo-gallery 跨站脚本漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Photo Gallery, which can be exploited by an attacker to execute script in a victim's web...
CVE-2015-10109
A vulnerability was found in Video Playlist and Gallery Plugin up to 1.136 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the file wp-media-cincopa.php. The manipulation leads to cross-site request forgery. The attack may be launched...
CVE-2015-10109
CVE-2015-10109 affects the Video Playlist and Gallery Plugin for WordPress up to version 1.136, where the file wp-media-cincopa.php is implicated in a cross-site request forgery (CSRF). The vulnerability enables CSRF via an unknown functionality in that file, with remote exploitation possible. Th...
CVE-2015-10109
A vulnerability was found in Video Playlist and Gallery Plugin up to 1.136 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the file wp-media-cincopa.php. The manipulation leads to cross-site request forgery. The attack may be launched...
PT-2023-10288 · WordPress · Video Playlist/Gallery Plugin
Name of the Vulnerable Software and Affected Versions: Video Playlist and Gallery Plugin versions up to 1.136 Description: A problem was found in the Video Playlist and Gallery Plugin. It affects some unknown functionality of the file wp-media-cincopa.php. The issue leads to cross-site request...
CVE-2015-10109: Cross-Site Request Forgery (CSRF)
A vulnerability was found in Video Playlist and Gallery Plugin up to 1.136 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the file wp-media-cincopa.php. The manipulation leads to cross-site request forgery. The attack may be launched...
CVE-2014-125101
A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...
Sql injection
A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...
CVE-2014-125101
The CVE-2014-125101 entry concerns the Portfolio Gallery Plugin for WordPress, affected versions up to 1.1.8. A SQL injection vulnerability exists in an unspecified component/part, which can be exploited remotely. Remediation is to upgrade to version 1.1.9, with patch identifier 58ed88243e17df766...
CVE-2014-125101 Portfolio Gallery Plugin sql injection
A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...
CVE-2014-125101
A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...
PT-2023-10169 · WordPress · Portfolio Gallery Plugin
Name of the Vulnerable Software and Affected Versions: Portfolio Gallery Plugin versions up to 1.1.8 Description: A critical vulnerability has been found in the Portfolio Gallery Plugin on WordPress, affecting an unknown part. The manipulation leads to sql injection and can be initiated remotely...
CVE-2014-125101: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this issue. The identifi...
CVE-2023-23705
Cross-Site Request Forgery CSRF vulnerability in HM Plugin WordPress Books Gallery plugin = 4.4.8 versions...
CVE-2023-23705
CVE-2023-23705 affects the HM Plugin WordPress Books Gallery plugin, versions