CVE-2025-22263

CVE-2025-22263 — NotFound Global Gallery: Reflected XSS in Global Gallery (WordPress plugin) up to v8.8.0. Root cause: improper neutralization of user input during web page generation. Impact per cited sources: potential client-side script execution when malicious input is reflected in the page. ...

WordPress Global Gallery - WordPress Responsive Gallery plugin <= 9.1.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

WordPress Global Gallery - WordPress Responsive Gallery plugin = 9.1.5 - Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by Lucio Sá in WordPress Plugin Global Gallery versions = 9.1.5...