CVE-2026-97260

Unauthenticated Cross Site Scripting XSS in MaxGalleria = 6.5.3 versions...

CVE-2026-97260 WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in MaxGalleria = 6.5.3 versions...

CVE-2026-97260 WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in MaxGalleria = 6.5.3 versions...

CVE-2026-97260

The MaxGalleria WordPress plugin versions

EUVD-2026-90858

Unauthenticated Cross Site Scripting XSS in MaxGalleria = 6.5.3 versions...

WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MaxGalleria versions = 6.5.3...

PT-2026-103888

Unauthenticated Cross Site Scripting XSS in MaxGalleria = 6.5.3 versions...

CVE-2026-97260: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in MaxGalleria = 6.5.3 versions...

EUVD-2024-47092

Malicious code in bioql PyPI...

EUVD-2024-32161

Malicious code in bioql PyPI...

EUVD-2022-30263

Malicious code in bioql PyPI...

CVE-2024-3581

The MaxGalleria plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the addmedialibraryimagestogallery function in all versions up to, and including, 6.4.2. This makes it possible for authenticated attackers, with subscriber access or above, to...

CVE-2024-5970

The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallerythumb shortcode in all versions up to, and including, 6.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-5970 MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode

The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallerythumb shortcode in all versions up to, and including, 6.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-5970 MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode

The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallerythumb shortcode in all versions up to, and including, 6.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-5970

CVE-2024-5970 applies to the MaxGalleria WordPress plugin. It is a Stored XSS vulnerability in the maxgallery_thumb shortcode, affecting all versions up to and including 6.4.4. The issue stems from insufficient input sanitization and output escaping on user-supplied attributes, allowing an attack...

WordPress MaxGalleria plugin <= 6.4.4 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin MaxGalleria versions = 6.4.4...

WordPress Plugin MaxGalleria Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-5970: Improper Neutralization of Input During Web Page Generation

The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallerythumb shortcode in all versions up to, and including, 6.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress MaxGalleria Plugin <= 6.4.4 is vulnerable to Cross Site Scripting (XSS)

Software MaxGalleria Type Plugin Vulnerable versions = 6.4.4 Fixed in 6.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5970 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 847e5197a4f5 Credits Peter Thaleikis Required...