Lucene search
K

40 matches found

Nuclei
Nuclei
added 6 hours ago6 views

WordPress Gmedia Photo Gallery Plugin < 1.20.0 - Cross-Site Scripting

The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the album's name before outputting it in pages or posts with a media embed, which could allow high privilege users such as admin to perform Cross-Site Scripting XSS attacks even when the unfiltered-html capabilit...

4.8CVSS5.1AI score0.00351EPSS
Exploits2References3
RedhatCVE
RedhatCVE
added 2026/01/01 4:26 p.m.6 views

CVE-2025-63014

Cross-Site Request Forgery CSRF vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through = 1.25.0...

4.3CVSS5.9AI score0.00017EPSS
Exploits0References1
NVD
NVD
added 2025/12/31 4:15 p.m.5 views

CVE-2025-63014

Cross-Site Request Forgery CSRF vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through = 1.25.0...

4.3CVSS0.00017EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 3:52 p.m.3 views

EUVD-2025-206028

Cross-Site Request Forgery CSRF vulnerability in Serhii Pasyuk Gmedia Photo Gallery allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through 1.24.1...

4.3CVSS6.3AI score0.00017EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/31 3:52 p.m.9 views

CVE-2025-63014 WordPress Gmedia Photo Gallery plugin <= 1.24.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Serhii Pasyuk Gmedia Photo Gallery allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through 1.24.1...

4.3CVSS6.5AI score0.00017EPSS
Exploits0References1
CVE
CVE
added 2025/12/31 3:52 p.m.4 views

CVE-2025-63014

Technical details for CVE-2025-63014 are not provided in the supplied documents. No information on affected product versions, root cause, impact, or remediation is available here. Monitor for updates from official advisories and vulnerability databases.

4.3CVSS5.9AI score0.00017EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/31 3:52 p.m.25 views

CVE-2025-63014 WordPress Gmedia Photo Gallery plugin <= 1.25.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through = 1.25.0...

4.3CVSS0.00017EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/31 3:47 p.m.10 views

WordPress Gmedia Photo Gallery plugin <= 1.25.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by daroo in WordPress Plugin Gmedia Photo Gallery versions = 1.25.0...

4.3CVSS6.7AI score0.00017EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.5 views

PT-2025-54384

Cross-Site Request Forgery CSRF vulnerability in Serhii Pasyuk Gmedia Photo Gallery allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through 1.24.1...

4.3CVSS6.8AI score0.00017EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.2 views

WordPress plugin Gmedia Photo Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site reques...

4.3CVSS6.5AI score0.00017EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-15911

Malicious code in bioql PyPI...

4.8CVSS5.1AI score0.00351EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-19395

Malicious code in bioql PyPI...

7.5CVSS6.5AI score0.00423EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/29 2:26 p.m.3 views

CVE-2025-53257

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows PHP Local File Inclusion.This issue affects Gmedia Photo Gallery: from n/a through = 1.23.0...

7.5CVSS5.9AI score0.00423EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/06/27 2:46 p.m.4 views

WordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin Gmedia Photo Gallery versions = 1.23.0...

7.5CVSS6.7AI score0.00423EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/06/27 2:15 p.m.4 views

CVE-2025-53257

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows PHP Local File Inclusion.This issue affects Gmedia Photo Gallery: from n/a through = 1.23.0...

7.5CVSS0.00423EPSS
Exploits0References1
CVE
CVE
added 2025/06/27 1:21 p.m.17 views

CVE-2025-53257

CVE-2025-53257 affects Gmedia Photo Gallery (WordPress plugin) and is an Unauthenticated Local File Inclusion via improper control of filename for include/require in PHP. Affected versions are 1.23.0 and earlier. The vulnerability is categorized as PHP Local File Inclusion (LFI) and is reported w...

7.5CVSS5.9AI score0.00423EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/27 1:21 p.m.3 views

CVE-2025-53257 WordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Serhii Pasyuk Gmedia Photo Gallery allows PHP Local File Inclusion. This issue affects Gmedia Photo Gallery: from n/a through 1.23.0...

7.5CVSS6.8AI score0.00423EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/27 1:21 p.m.11 views

CVE-2025-53257 WordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows PHP Local File Inclusion.This issue affects Gmedia Photo Gallery: from n/a through = 1.23.0...

7.5CVSS0.00423EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.3 views

WordPress plugin Gmedia Photo Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS6.5AI score0.00423EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/06/27 12:0 a.m.2 views

PT-2025-27164 · Unknown · Gmedia Photo Gallery

Name of the Vulnerable Software and Affected Versions: Gmedia Photo Gallery versions 1.23.0 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP programs, also known as 'PHP Remote File Inclusion'. This allows PHP Local File Inclusion...

7.5CVSS6.7AI score0.00423EPSS
Exploits0References3
Rows per page
Query Builder