CVE-2025-11254 Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injection

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 27.0.3 via gallery submissions. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which c...

CVE-2025-11254 Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injection

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 27.0.3 via gallery submissions. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which c...

CVE-2025-11254

CVE-2025-11254 affects the WordPress plugin “Contest Gallery – Upload, Vote & Sell with PayPal and Stripe” (versions up to 27.0.3). The vulnerability is CSV Injection in gallery submissions that allows unauthenticated input to be embedded in exported CSVs, enabling code execution when the CSV is ...

EUVD-2025-33811

Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58278

Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58278

Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58278

Technical details about CVE-2025-58278 are not publicly provided in the supplied documents. The sources describe an identity authentication bypass in the Gallery app with confidentiality impact but do not specify affected versions, root cause, or fixes. Monitor for updates.

CVE-2025-58278

Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58278

Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2025-33806

Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54654

Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54654

Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54654

Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54654

Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-54654

CVE-2025-54654 concerns Huawei HarmonyOS’ Gallery module with a privilege-control vulnerability that can impact service confidentiality. Connected sources indicate the flaw resides in the Gallery component and can be exploited locally to access confidential data, though no direct exploit details,...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An authentication bypass vulnerability exists in the Huawei HarmonyOS Gallery app, which can be exploited by an attacker to compromise service confidentialit...

PT-2025-41633

Name of the Vulnerable Software and Affected Versions Gallery app affected versions not specified Description An identity authentication bypass issue exists in the Gallery app. Exploitation of this issue could compromise service confidentiality. Recommendations At the moment, there is no...

WordPress plugin Contest Gallery – Upload, Vote & Sell with PayPal and Stripe 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS Gallery module, which can be exploited by an attacker to compromise service confidentiality...

PT-2025-41629

Name of the Vulnerable Software and Affected Versions Apache Gallery affected versions not specified Description A permission control issue exists in the Gallery module. Successful exploitation could compromise service confidentiality. Recommendations At the moment, there is no information about ...