14072 matches found
CVE-2026-39781
Unauthenticated Cross Site Scripting XSS in Document Gallery = 5.1.1 versions...
CVE-2026-39785
The Gmedia Photo Gallery plugin for WordPress (versions
CVE-2026-39785 WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...
EUVD-2026-93031
Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...
CVE-2026-39785 WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...
CVE-2026-39781 WordPress Document Gallery plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Document Gallery = 5.1.1 versions...
EUVD-2026-93029
Unauthenticated Cross Site Scripting XSS in Document Gallery = 5.1.1 versions...
CVE-2026-39781
The Document Gallery plugin for WordPress, affecting versions
CVE-2026-39781 WordPress Document Gallery plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Document Gallery = 5.1.1 versions...
PT-2026-106451
Unauthenticated Cross Site Scripting XSS in Document Gallery = 5.1.1 versions...
PT-2026-106453
Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...
WP-Contest-Gallery-28.1.4-Exploit
⚠️ En cours de test Ce PoC est activement testé et amélioré. Les fonctionnalités peuvent changer entre les versions. CVE-2026-3180 WordPress Contest Gallery — Injection SQL aveugle non authentifiée Outil d'évaluation de preuve de concept pour CVE-2026-3180 Auteur : Sudeepa Wanigarathna · Découvert...
CVE-2025-44108-SXSS
CVE-2025-44108 - ثغرات البرمجة النصية عبر المواقع المخزنة XSS في نظام إدارة المحتوى FlatPress الإصدار 1.3.1 الوصف توجد ثغرة برمجة نصية عبر المواقع مخزنة XSS في لوحة الإدارة لنظام Flatpress CMS الإصدار 1.3.1. يمكن للمهاجم الذي يتمتع بصلاحيات مسؤول حقن حمولة JavaScript ضارة في النظام، والتي يتم...
CVE-2025-23942-poc
استغلال WP Load Gallery CVE-2025-23942 📌 الوصف ثغرة رفع غير مقيد لملف بنوع خطير Unrestricted Upload of File with Dangerous Type في WP Load Gallery من NgocCode تسمح برفع Web Shell إلى خادم الويب. تؤثر هذه المشكلة على WP Load Gallery: من n/a حتى 2.1.6. ⚠️ تفاصيل الثغرة معرف CVE: CVE-2025-23942...
CVE-2026-102777
Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...
WordPress Document Gallery plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by duna in WordPress Plugin Document Gallery versions = 5.1.1...
WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Coopernicus in WordPress Plugin Gmedia Photo Gallery versions = 1.25.1...
CVE-2026-102776
Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping method, image type set, order status an...
CVE-2026-102778
Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...