CVE-2025-58881 WordPress New Simple Gallery Plugin <= 8.0 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus New Simple Gallery allows Blind SQL Injection. This issue affects New Simple Gallery: from n/a through 8.0...

CVE-2025-58881

CVE-2025-58881 is a SQL injection in the WordPress plugin New Simple Gallery (versions through 8.0). Root cause: improper neutralization of special elements in SQL commands, enabling blind SQL injection. Affected product/version: WordPress plugin New Simple Gallery

PT-2025-36218

Name of the Vulnerable Software and Affected Versions: gopiplus New Simple Gallery versions through 8.0 Description: The software contains an SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for blind SQL injection. Recommendations: Version...

WordPress plugin InPost Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-36250

Name of the Vulnerable Software and Affected Versions: InPost Gallery versions through 2.1.4.5 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion...

WordPress plugin New Simple Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2025-58610

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through = 1.3.1...

WordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin Gallery PhotoBlocks versions = 1.3.1...

CVE-2025-58610 WordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through = 1.3.1...

CVE-2025-58610 WordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through = 1.3.1...

CVE-2025-58610

CVE-2025-58610 affects Gallery PhotoBlocks (WordPress plugin) with Stored XSS due to improper input neutralization during web page generation. Affected versions areGallery PhotoBlocks 1.3.1 and earlier (n/a–1.3.1). The vulnerability is confirmed in multiple sources (NVD patchnotes and Patchstack ...

WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin InPost Gallery versions = 2.1.4.5...

WordPress plugin Gallery PhotoBlocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-35744

Name of the Vulnerable Software and Affected Versions: WP Chill Gallery PhotoBlocks versions through 1.3.1 Description: The software contains a cross-site scripting XSS flaw due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations:...

CVE-2025-9695

A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.thinkyeah.galleryvault. The manipulation leads to improper export of android application components. T...

CVE-2025-48349

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in origincode Video Gallery – Vimeo and YouTube Gallery smart-grid-gallery allows Stored XSS.This issue affects Video Gallery – Vimeo and YouTube Gallery: from n/a through = 1.1.7...

CVE-2025-53224

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Koen Schuit NextGEN Gallery Search nextgen-gallery-search-galleries allows Reflected XSS.This issue affects NextGEN Gallery Search: from n/a through = 2.12...

CVE-2025-9695 GalleryVault Gallery Vault App com.thinkyeah.galleryvault AndroidManifest.xml improper export of android application components

A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.thinkyeah.galleryvault. The manipulation leads to improper export of android application components. T...

CVE-2025-9695

CVE-2025-9695 affects GalleryVault Gallery Vault App for Android up to version 4.5.2. The issue arises from an improperly exported AndroidManifest.xml in the component com.thinkyeah.galleryvault, enabling a local-execution path. The vulnerability could lead to exposure of confidential data on the...

CVE-2025-53224

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Koen Schuit NextGEN Gallery Search nextgen-gallery-search-galleries allows Reflected XSS.This issue affects NextGEN Gallery Search: from n/a through = 2.12...