CVE-2021-4384

Summary: CVE-2021-4384 affects the WordPress Photo Gallery – Image Gallery plugin for WordPress. The vulnerability is a CSRF flaw caused by missing or incorrect nonce validation in load_images_thumbnail() and edit_gallery() functions, allowing unauthenticated attackers to edit galleries via forge...

WordPress Plugin Photo Gallery – Image Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2023-12496 · WordPress · The Wordpress Photo Gallery – Image Gallery

Name of the Vulnerable Software and Affected Versions: The WordPress Photo Gallery – Image Gallery plugin for WordPress versions up to, and including, 1.0.6 Description: The issue is due to missing or incorrect nonce validation on the load images thumbnail and edit gallery functions, making it...

Exploit for CVE-2023-2877

CVE-2023-2877 Formidable Forms 6.3.1 - Subscriber+ Remote...

Photo Gallery 2.0 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

CVE-2023-28784

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

CVE-2023-28784

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

CVE-2023-28784 WordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

CVE-2023-28784

CVE-2023-28784 affects the WordPress plugin Contest Gallery (

CVE-2023-28784 WordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

WordPress Gallery Metabox Plugin <= 1.5 is vulnerable to Broken Access Control

Software Gallery Metabox Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-2562 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 1b3822efa9e8 Credits Marco Wotschka Required...

WordPress Gallery Metabox Plugin <= 1.5 is vulnerable to Broken Access Control

Software Gallery Metabox Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-2561 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 640496049b74 Credits Marco Wotschka Required...

PT-2023-21959 · WordPress · Contest Gallery

Name of the Vulnerable Software and Affected Versions: Contest Gallery plugin versions = 21.1.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, potentially allowing them to...

WordPress Photo Gallery by Ays Plugin < 5.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Photo Gallery by Ays Type Plugin Vulnerable versions 5.1.7 Fixed in 5.1.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2568 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 1b5a7b5e5c1c Credits Erwan LR WPScan...

WordPress plugin Contest Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-25147 · John Brien · Nextgen Gallery Plugin

Name of the Vulnerable Software and Affected Versions: John Brien WordPress NextGen GalleryView plugin versions 0.5.5 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a...

WordPress Photo Gallery by 10Web Plugin <= 1.8.15 is vulnerable to Broken Access Control

Software Photo Gallery by 10Web Type Plugin Vulnerable versions = 1.8.15 Fixed in 1.8.16 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-33995 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0293acc0bbe3 Credits Rafshanzani Suhada...

Online Art Gallery Project 1.0 Arbitrary File Upload

Exploit Title: Online Art gallery project 1.0 - Arbitrary File Upload Unauthenticated Google Dork: n/a Date: 14/06/2023 Exploit Author: Ramil Mustafayev Vendor Homepage: https://github.com/projectworldsofficial Software Link: https://github.com/projectworlds32/Art-Gallary-php/archive/master.zip...

WordPress Photo Gallery Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Photo Gallery, which can be exploited by an attacker to execute script in a victim's web...