11768 matches found
WordPress plugin Smart Image Gallery security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...
PT-2024-36308 · WordPress · The Photo Gallery
Name of the Vulnerable Software and Affected Versions: The Photo Gallery, Sliders, Proofing and WordPress plugin versions prior to 3.59.3 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered htm...
CVE-2024-37442
Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1...
CVE-2024-37442
Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1...
CVE-2024-37442
CVE-2024-37442 concerns WordPress plugin Photo Gallery by Ays – Responsive Image Gallery . The cited issue is an HTML Injection vulnerability arising from improper neutralization of output elements used by a downstream component. Affected software is listed as Photo Gallery by Ays before version ...
CVE-2024-37442 WordPress Photo Gallery by Ays – Responsive Image Gallery plugin < 5.7.1 - HTML Injection vulnerability
Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1...
CVE-2024-37442 WordPress Photo Gallery by Ays – Responsive Image Gallery plugin < 5.7.1 - HTML Injection vulnerability
Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1...
WordPress Video Gallery - YouTube Gallery And Vimeo Gallery 2.3.6 SQL Injection Vulnerability
Exploit Title: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://total-soft.com/wp-video-gallery/ Version 2.3.6 1. Access the Admin Panel: - Navigate to the admin panel of your WordPress site. - Go ...
PT-2024-27556 · Ays · Photo Gallery
Name of the Vulnerable Software and Affected Versions: Photo Gallery by Ays versions prior to 5.7.1 Description: The issue is related to an Improper Neutralization of Special Elements in Output Used by a Downstream Component, also known as an 'Injection' vulnerability, in the Photo Gallery Team...
WordPress plugin Photo Gallery by Ays Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An injection vulnerability...
CVE-2024-37542
Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...
CVE-2024-37542
Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...
CVE-2024-37542 WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...
CVE-2024-37542 WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3...
WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Responsive Image Gallery, Gallery Album versions = 2.0.3...
WordPress plugin Responsive Image Gallery security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-27640 · Wpdevart · Wpdevart Responsive Image Gallery
Name of the Vulnerable Software and Affected Versions: WpDevArt Responsive Image Gallery, Gallery Album versions through 2.0.3 Description: The issue is related to a Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album. Recommendations: For versions through 2.0....
WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Broken Access Control
Software Responsive Image Gallery, Gallery Album Type Plugin Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37542 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 563a47d11703 Credits...
WordPress Video Gallery - YouTube Gallery And Vimeo Gallery 2.3.6 SQL Injection
Exploit Title: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Date: 2024-07-05 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://total-soft.com/wp-video-gallery/ Version 2.3.6 1. Access the Admin Panel: - Navigate to the admin panel of your...
WordPress Photo Gallery 1.8.26 Cross Site Scripting
Exploit Title: Wordpress Photo Gallery Version 1.8.26 Stored XSS Date: 2024-07-03 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://10web.io/plugins/wordpress-photo-gallery/ Version 1.8.26 Steps to Execute the Payload: 1. Click Photo Gallery Themes Edit Themes...