13509 matches found
CVE-2026-102399
Unauthenticated Cross Site Request Forgery CSRF in Photo Gallery by Supsystic = 1.21.0 versions...
WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Photo Gallery by 10Web versions = 1.8.46...
CVE-2026-102399
The Photo Gallery by Supsystic plugin for WordPress, version 1.21.0 and below , is vulnerable to an unauthenticated Cross Site Request Forgery (CSRF) . While the vulnerability is identified, the provided documents do not specify the exact root cause, affected functions, or specific remediation st...
CVE-2026-102399 WordPress Photo Gallery by Supsystic plugin <= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Photo Gallery by Supsystic = 1.21.0 versions...
EUVD-2026-89946
Unauthenticated Cross Site Request Forgery CSRF in Photo Gallery by Supsystic = 1.21.0 versions...
CVE-2026-96822
The WordPress Books Gallery plugin, version 4.8.3 and below , is vulnerable to an unauthenticated SQL Injection . This vulnerability allows a remote attacker to execute arbitrary SQL commands against the database. Exploitation details are not provided in the documentation, and no specific remedia...
EUVD-2026-89875
Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...
CVE-2026-96822 WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability
Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...
CVE-2026-96822 WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability
Unauthenticated SQL Injection in Books Gallery = 4.8.3 versions...
CVE-2026-94123 WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability
Unauthenticated Arbitrary File Download in NextGEN Gallery = 4.5.0 versions...
CVE-2026-94123 WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability
Unauthenticated Arbitrary File Download in NextGEN Gallery = 4.5.0 versions...
CVE-2026-94123
The NextGEN Gallery plugin for WordPress (versions
EUVD-2026-89840
Unauthenticated Arbitrary File Download in NextGEN Gallery = 4.5.0 versions...
CVE-2026-94122 WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability
Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...
EUVD-2026-89839
Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...
CVE-2026-94122
The WordPress Responsive Slider Gallery plugin, in versions
CVE-2026-94122 WordPress Responsive Slider Gallery plugin <= 1.5.5 - PHP Object Injection vulnerability
Editor PHP Object Injection in Responsive Slider Gallery = 1.5.5 versions...
WordPress Photo Gallery by Supsystic plugin <= 1.21.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Intrudify in WordPress Plugin Photo Gallery by Supsystic versions = 1.21.0...
CVE-2025-62950-PoC
Descripción Esta prueba de concepto PoC describe una vulnerabilidad de falsificación de solicitudes entre sitios Cross-Site Request Forgery, CSRF encontrada en el plugin Contest Gallery – Upload, Vote & Sell with PayPal and Stripe v. 26.1.2. El problema permite a un atacante engañar a un usuario...