CVE-2026-12982

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users...

CVE-2026-12982

The Document Gallery WordPress plugin (before 5.1.1) is affected by a Reflected XSS in an unauthenticated AJAX action (dg_generate_gallery) caused by improper sanitisation/escaping of user input. Impact is XSS for unauthenticated users; remediation is to update to 5.1.1 or later (as stated in CVE...

PT-2026-65325

Name of the Vulnerable Software and Affected Versions Contest Gallery versions prior to 30.0.7 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Contest Gallery to ...

PT-2026-64997

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.2 Description Stored cross-site scripting is possible due to improper escaping of the title-img Individual Attribute List value during the rendering of Gallery and Kanban cover images. This occurs via unescaped sty...

EUVD-2026-48250

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30...

CVE-2026-65475 WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30...

EUVD-2026-48122

Author Cross Site Scripting XSS in Photo Gallery = 2.7.7.29 versions...

CVE-2026-65519

The advisory concerns CVE-2026-65519: a Cross Site Scripting (XSS) vulnerability in the WordPress Photo Gallery plugin, versions up to 2.7.7.29. According to the record, an author context XSS exists in affected releases. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L with a ...

CVE-2026-57696

The CVE concerns the WordPress Picture Gallery plugin (WordPress plugin) with versions

EUVD-2026-48171

Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...

EUVD-2026-48145

Administrator Cross Site Scripting XSS in Photo Gallery by Supsystic = 1.16.3 versions...

CVE-2026-24628

CVE-2026-24628 affects the WordPress plugin Photo Gallery by Supsystic (versions

CVE-2026-65713

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-65713

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

EUVD-2026-47898

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-65713 Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

WordPress Photo Gallery plugin <= 2.7.7.29 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Photo Gallery versions = 2.7.7.29...

PT-2026-63610

Modals gallery paths could enumerate unintended directories...

DRUPAL-CONTRIB-2026-088

The Photoswipe Drupal module provides integration for the widely used PhotoSwipe lightbox library to display / zoom images in lightbox galleries using the provided image formatters. The module didn't sufficiently check access permissions, when viewing an image using the photoswipe image gallery...

WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by hhhai in WordPress Plugin Picture Gallery versions = 1.6.5...