Cross site scripting

The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress Gallery PhotoBlocks plugin <= 1.2.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Gallery PhotoBlocks plugin versions = 1.2.4. Solution Update the WordPress Gallery PhotoBlocks plugin to the latest available version at least 1.2.6...

WordPress WPTools Masonry Gallery & Posts For Divi plugin < 3.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WPTools Masonry Gallery & Posts For Divi plugin versions 3.1.2. Solution Update the WordPress WPTools Masonry Gallery & Posts For Divi plugin to the latest available version at least 3.1.2...

WordPress Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery plugin <= 2.3.5 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Gallery Blocks with Lightbox. Image Gallery, HTML5 video , YouTube, Vimeo Video Gallery and Lightbox for native gallery plugin versions = 2.3.5. Solution Update the WordPress Gallery Blocks with Lightbox. Image Gallery, HTML5...

WordPress Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery plugin <= 2.3.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Gallery Blocks with Lightbox. Image Gallery, HTML5 video , YouTube, Vimeo Video Gallery and Lightbox for native gallery plugin versions = 2.3.5. Solution Update the WordPress Gallery Blocks with...

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.5.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.5.4. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at least 3.5.5...

WordPress Pretty Grid – Social Feed Gallery Plugin plugin < 1.0.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Pretty Grid – Social Feed Gallery Plugin plugin versions 1.0.8. Solution Update the WordPress Pretty Grid – Social Feed Gallery Plugin plugin to the latest available version at least 1.0.8...

WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin < 3.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin versions 3.6. Solution Update the WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin to the...

WordPress YouTube Responsive Gallery plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress YouTube Responsive Gallery plugin versions = 1.0.1. Solution No patched version available...

WordPress Social Gallery Lite plugin <= 3.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Social Gallery Lite plugin versions = 3.1. Solution No patched version available...

WordPress Automatic YouTube Gallery plugin < 1.6.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Automatic YouTube Gallery plugin versions 1.6.5. Solution Update the WordPress Automatic YouTube Gallery plugin to the latest available version at least 1.6.5...

WordPress Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio plugin <= 2.1.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio plugin versions = 2.1.6. Solution Update the WordPress Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio plugin to the late...

WordPress Justified Gallery plugin < 1.5.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Justified Gallery plugin versions 1.5.1. Solution Update the WordPress Justified Gallery plugin to the latest available version at least 1.5.1...

WordPress Lightbox – EverlightBox Gallery plugin <= 1.1.17 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Lightbox – EverlightBox Gallery plugin versions = 1.1.17. Solution Update the WordPress Lightbox – EverlightBox Gallery plugin to the latest available version at least 1.1.18...

WordPress WordPress Slideshow Gallery Plugin – Easy Slideshow plugin <= 1.2.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Slideshow Gallery Plugin – Easy Slideshow plugin versions = 1.2.1. Solution No patched version available...

WordPress YouTube Responsive Gallery plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress YouTube Responsive Gallery plugin versions = 1.0.1. Solution No patched version available...

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.5.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.5.4. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at least 3.5.5...

WordPress Justified Gallery plugin < 1.5.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Justified Gallery plugin versions 1.5.1. Solution Update the WordPress Justified Gallery plugin to the latest available version at least 1.5.1...

WordPress WordPress Gallery Plugin – Edge Photo Gallery plugin <= 2.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Gallery Plugin – Edge Photo Gallery plugin versions = 2.0.2. Solution No patched version available...

WordPress RW Divi Unite Gallery plugin <= 1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress RW Divi Unite Gallery plugin versions = 1.0. Solution No patched version available...