CVE-2015-9380

The photo-gallery plugin before 1.2.42 for WordPress has CSRF...

CVE-2019-15829

The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS...

CVE-2019-15829

CVE-2019-15829 affects the Gallery Photoblocks (photoblocks-grid-gallery) WordPress plugin. The vulnerability is an authenticated Reflected XSS via the id parameter in wp-admin/admin.php?page=photoblocks-edit&id=, exploitable by an administrator and potentially able to inject client-side script. ...

CVE-2015-9380

The CVE-2015-9380 entry corresponds to a CSRF vulnerability in the WordPress plugin Photo Gallery (versions before 1.2.42). The issue is described as a cross-site request forgery in the photo-gallery plugin, enabling unauthorized actions without authentication. Multiple sources (NVD description, ...

WordPress woo-variation-gallery cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. woo-variation-gallery is a plugin for e-commerce sites that adds images to products. A cross-site scripting vulnerability exists in...

CVE-2019-15778

The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS...

CVE-2019-15778

The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS...

CVE-2019-15779

The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qliggdismissnotice or qliggformitemdelete...

CVE-2019-15779

The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qliggdismissnotice or qliggformitemdelete...

CVE-2019-15778

The CVE-2019-15778 entry concerns the WordPress plugin woo-variation-gallery, affected in versions prior to 1.1.29, which is described as having a cross-site scripting (XSS) vulnerability. The vulnerability is rooted in improper handling/validation of client-side data, enabling XSS. Remediation a...

CVE-2019-15779

The CVE-2019-15779 entry concerns the WordPress insta-gallery plugin prior to version 2.4.8, which has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete. Consequence per sources indicates lack of CSRF/authorization checks could allow unauthorized actions, including potential ...

CVE-2019-15779

The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qliggdismissnotice or qliggformitemdelete...

WordPress WP Social Feed Gallery plugin <= 2.4.7 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found in WordPress WP Social Feed Gallery plugin versions = 2.4.7. Solution Update the WordPress WP Social Feed Gallery plugin to the latest available version at least 2.4.8...

WordPress WP Social Feed Gallery plugin <= 2.4.7 - Authorization Check vulnerability

Authorization Check vulnerability found in WordPress WP Social Feed Gallery plugin versions = 2.4.7. Solution Update the WordPress WP Social Feed Gallery plugin to the latest available version at least 2.4.8...

WordPress gallery-by-supsystic plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gallery-by-supsystic is an image gallery plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

WordPress reflex-gallery plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. reflex-gallery is a responsive photo gallery plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

CVE-2019-14314

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...

CVE-2019-14314

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...

Sql injection

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...

CVE-2019-14314

The CVE-2019-14314 issue affects the Imagely NextGEN Gallery WordPress plugin prior to 3.2.11. The root cause is a SQL injection in modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php, allowing a remote attacker to execute arbitrary SQL commands and potentially compromise d...