11841 matches found
CVE-2019-16119
SQL injection in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php albumid parameter...
Cross site scripting
Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php...
Cross site scripting
Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php...
Sql injection
SQL injection in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php albumid parameter...
CVE-2019-16117
Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php...
CVE-2019-16117
CVE-2019-16117 affects the WordPress plugin Photo Gallery by 10Web, with XSS in the gallery title parsed via admin/models/Galleries.php. Affected versions are prior to 1.5.35. Root cause: insufficient sanitization/escaping of gallery title, enabling stored XSS that can trigger when listing or vie...
CVE-2019-16118
CVE-2019-16118 affects the WordPress Photo Gallery (10Web Photo Gallery) plugin prior to 1.5.35. The issue is a Cross-Site Scripting (XSS) vulnerability exposed via admin/controllers/Options.php, caused by unvalidated/unescaped data. Impact per sources: attacker could execute script in victim’s b...
CVE-2019-16118
Cross site scripting XSS in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php...
CVE-2019-16119
The CVE concerns the WordPress Photo Gallery by 10Web plugin. A SQL injection vulnerability exists in versions prior to 1.5.35, exploitable via the album_id parameter in admin/controllers/Albumsgalleries.php, allowing potential unauthorized database access or modification. Public writeups rate th...
CVE-2019-16119
SQL injection in the photo-gallery 10Web Photo Gallery plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php albumid parameter...
PT-2019-14521 · 10Web · 10Web Photo Gallery
Name of the Vulnerable Software and Affected Versions: 10Web Photo Gallery plugin versions prior to 1.5.35 Description: The issue exists in the photo-gallery plugin for WordPress, specifically via admin/models/Galleries.php, and allows for cross-site scripting XSS. Recommendations: For versions...
PT-2019-14522 · 10Web · 10Web Photo Gallery
Name of the Vulnerable Software and Affected Versions: 10Web Photo Gallery plugin versions prior to 1.5.35 Description: The issue exists due to cross site scripting XSS in the photo-gallery plugin. This can be exploited via the admin/controllers/Options.php endpoint. Recommendations: For versions...
Photo Gallery by 10Web < 1.5.35 - SQL Injection & XSS
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by a SQL Injection & XSS security vulnerability...
PT-2019-14523 · 10Web · 10Web Photo Gallery
Name of the Vulnerable Software and Affected Versions: 10Web Photo Gallery plugin versions prior to 1.5.35 Description: A SQL injection issue exists in the photo-gallery plugin for WordPress. The issue is exploitable via the album id parameter in the admin/controllers/Albumsgalleries.php file...
WordPress photoblocks-grid-gallery plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. photoblocks-grid-gallery is an image gallery plugin used in it. A cross-site scripting vulnerability exists in WordPress...
WordPress insta-gallery plugin operates as authorized vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. insta-gallery is a plugin for displaying personal social networks. A security vulnerability exists in WordPress insta-gallery plugin...
WordPress photo-gallery plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. photo-gallery is an image gallery plugin used in it. A cross-site request forgery vulnerability exists in versions of the WordPress...
CVE-2019-15829
The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS...