CVE-2023-41659

CVE-2023-41659 : WordPress plugin “Responsive Gallery Grid” (BDWM/Responsive Gallery Grid, <= 2.3.10) suffers a Cross-Site Request Forgery (CSRF) vulnerability in its settings update, allowing unauthenticated actions on affected sites. Patchstack reports a fixed release in 2.3.14; prior report...

CVE-2024-1664

The Responsive Gallery Grid WordPress plugin, in versions prior to 2.3.11 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitise and escape certain plugin settings. This allows high-privilege users, such as administrators, to perform XSS at...

CVE-2024-4091

The Responsive Gallery Grid WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.3.15 . The root cause is the lack of sanitization and escaping of certain plugin settings, which allows high-privilege users, such as administrators, to execute malicious scripts...