Lucene search
K

1229 matches found

EUVD
EUVD
added 2026/06/15 9:30 p.m.5 views

EUVD-2026-36940

Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...

7.2CVSS5.3AI score0.00446EPSS
Exploits0References2
NVD
NVD
added 2026/06/15 9:16 p.m.6 views

CVE-2026-42688

Subscriber Cross Site Scripting XSS in Modula Image Gallery = 2.14.23 versions...

6.5CVSS0.00236EPSS
Exploits0References1
NVD
NVD
added 2026/06/15 9:16 p.m.4 views

CVE-2026-39481

Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...

7.2CVSS0.00446EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/15 8:18 p.m.7 views

CVE-2026-42688 WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Modula Image Gallery = 2.14.23 versions...

6.5CVSS5.1AI score0.00236EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/15 8:18 p.m.25 views

CVE-2026-42688 WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Modula Image Gallery = 2.14.23 versions...

6.5CVSS0.00236EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/15 8:18 p.m.6 views

EUVD-2026-36836

Subscriber Cross Site Scripting XSS in Modula Image Gallery = 2.14.23 versions...

6.5CVSS5.1AI score0.00236EPSS
Exploits0References1
CVE
CVE
added 2026/06/15 8:18 p.m.12 views

CVE-2026-42688

The CVE details a Cross Site Scripting (XSS) vulnerability in WordPress Modula Image Gallery plugin, affected

6.5CVSS5.1AI score0.00236EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/15 8:17 p.m.25 views

CVE-2026-39481 WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability

Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...

7.2CVSS0.00446EPSS
Exploits0References1
CVE
CVE
added 2026/06/15 8:17 p.m.9 views

CVE-2026-39481

CVE-2026-39481 affects the WordPress plugin Modula Image Gallery (versions up to 2.14.18). The issue is described as a PHP Object Injection vulnerability in the plugin, with the author component cited in the initial description. Providing concrete exploit details, affected files, or remediation s...

7.2CVSS5.3AI score0.00446EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/15 12:0 a.m.7 views

PT-2026-49382

Author PHP Object Injection in Modula Image Gallery = 2.14.18 versions...

7.2CVSS5.3AI score0.00446EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/06/15 12:0 a.m.8 views

PT-2026-49462

Subscriber Cross Site Scripting XSS in Modula Image Gallery = 2.14.23 versions...

6.5CVSS5.1AI score0.00236EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/06/06 12:0 a.m.8 views

WordPress plugin Photo Gallery by 10Web – Mobile-Friendly Image Gallery SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.5CVSS5.8AI score0.00328EPSS
Exploits0References13
RedhatCVE
RedhatCVE
added 2026/06/05 7:33 p.m.9 views

CVE-2026-27424

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS5.4AI score0.00213EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/05/26 8:46 a.m.6 views

WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Modula Image Gallery versions = 2.14.23...

6.5CVSS5.8AI score0.00236EPSS
Exploits0Affected Software1
CVE
CVE
added 2026/05/20 12:13 p.m.15 views

CVE-2026-27424

CVE-2026-27424 affects the WordPress plugin Image Photo Gallery Final Tiles Grid (Final Tiles Grid Gallery Lite) up to version 3.6.11. The issue is a Missing Authorization / Broken Access Control vulnerability due to incorrectly configured access control security levels. The CVSS 3.1 base score i...

4.3CVSS5.8AI score0.00213EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/05/20 12:12 p.m.9 views

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.11...

4.3CVSS5.8AI score0.00213EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/20 12:0 a.m.10 views

PT-2026-42152

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS5.8AI score0.00213EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/08 3:54 p.m.9 views

CVE-2026-42028 novaGallery: Unauthenticated Path Traversal in Album and Cached Image Routes Allows Reading Images Outside Gallery Root

novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability has been identified in novaGallery. This allows unauthenticated users to read image files outside the intended gallery root directory. This issue has been patched in version 2.1.1...

5.3CVSS5.7AI score0.00315EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/08 3:54 p.m.8 views

CVE-2026-42028

novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability has been identified in novaGallery. This allows unauthenticated users to read image files outside the intended gallery root directory. This issue has been patched in version 2.1.1...

5.3CVSS5.7AI score0.00315EPSS
Exploits0References4Affected Software1
Patchstack
Patchstack
added 2026/04/20 2:44 p.m.3 views

WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Plugin Modula Image Gallery versions = 2.14.18...

5.8AI score0.00446EPSS
Exploits0Affected Software1
Rows per page
Query Builder