11757 matches found
CVE-2025-22797
CVE-2025-22797 is a stored XSS in the Gallery and Lightbox WordPress plugin. The Red Hat and Wordfence entries identify it as an authenticated, stored Cross-Site Scripting vulnerability affecting Gallery and Lightbox versions up to 1.0.14. The connected documents do not provide a vendor patch or ...
CVE-2024-12403
The Image Gallery – Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'awsmgallery' parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2024-12403 Image Gallery – Responsive Photo Gallery <= 1.0.5 - Reflected Cross-Site Scripting
The Image Gallery – Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'awsmgallery' parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2024-12403
CVE-2024-12403 affects the WordPress plugin Image Gallery – Responsive Photo Gallery. The vulnerability is a reflected Cross-Site Scripting flaw via the awsmgallery parameter in all versions up to and including 1.0.5. It enables unauthenticated attackers to inject arbitrary scripts into pages tha...
CVE-2024-12403 Image Gallery – Responsive Photo Gallery <= 1.0.5 - Reflected Cross-Site Scripting
The Image Gallery – Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'awsmgallery' parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
WordPress plugin Gallery and Lightbox 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...
WordPress plugin Photo Gallery – Image Gallery by Ape 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin Image Gallery – Responsive Photo Gallery 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
PT-2025-4706 · Unknown · Oğulcan Özüğenc Gallery/Lightbox
Name of the Vulnerable Software and Affected Versions: Oğulcan Özügenç Gallery and Lightbox versions 1.0.14 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS, which allows stored XSS attacks...
WordPress Image Gallery – Responsive Photo Gallery plugin <= 1.0.5 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Image Gallery – Responsive Photo Gallery versions = 1.0.5...
WordPress Gallery and Lightbox plugin <= 1.0.14 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Gallery and Lightbox versions = 1.0.14...
CVE-2024-12853
The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10. This makes it possible for authenticated attackers, with Author-level access and above, to uploa...
CVE-2024-12853
The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10. This makes it possible for authenticated attackers, with Author-level access and above, to uploa...
CVE-2024-12853 Modula Image Gallery <= 2.11.10 - Authenticated (Author+) Arbitrary File Upload
The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10. This makes it possible for authenticated attackers, with Author-level access and above, to uploa...
CVE-2024-12853 Modula Image Gallery <= 2.11.10 - Authenticated (Author+) Arbitrary File Upload
The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10. This makes it possible for authenticated attackers, with Author-level access and above, to uploa...
CVE-2023-52954
Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2023-52954
Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2023-52954
Technical details for CVE-2023-52954 are not publicly available in the provided documents; monitor for updates from vendors and CVE feeds.