Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Contest-galleryContest Gallery*

10 matches found

CVE
CVE•added 2024/02/12 9:15 a.m.•78 views

CVE-2024-24887

Cross-Site Request Forgery (CSRF) vulnerability in Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress.This issue affects Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress...

8.8CVSS6.5AI score0.00051EPSS
CVE
CVE•added 2024/06/09 1:15 p.m.•75 views

CVE-2024-32778

Missing Authorization vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.4.

8.5CVSS8.5AI score0.00161EPSS
CVE
CVE•added 2024/03/28 5:15 a.m.•62 views

CVE-2024-30236

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.4.

9.9CVSS8.9AI score0.00367EPSS
CVE
CVE•added 2024/03/11 6:15 p.m.•60 views

CVE-2024-1487

The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks.

5.4CVSS6AI score0.00272EPSS
CVE
CVE•added 2024/11/28 10:15 a.m.•56 views

CVE-2024-11103

The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attacker...

9.8CVSS9.7AI score0.00177EPSS
CVE
CVE•added 2024/03/29 2:15 p.m.•56 views

CVE-2024-30428

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Contest Gallery allows Reflected XSS.This issue affects Contest Gallery: from n/a through 21.3.5.

7.1CVSS7.1AI score0.00144EPSS
CVE
CVE•added 2024/03/27 2:15 p.m.•54 views

CVE-2024-30238

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.2.

8.8CVSS8.9AI score0.00367EPSS
CVE
CVE•added 2024/08/01 11:15 p.m.•52 views

CVE-2024-39631

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Contest Gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through 23.1.2.

7.1CVSS6.9AI score0.00127EPSS
CVE
CVE•added 2024/11/05 10:15 a.m.•46 views

CVE-2024-10687

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to time-based SQL Injection via the $collectedIds parameter in all versions up to, and including, 24.0.3 due to insufficient esc...

9.8CVSS9.7AI score0.0042EPSS
CVE
CVE•added 2024/08/26 4:15 p.m.•41 views

CVE-2024-43283

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 23.1.2.

7.5CVSS5.3AI score0.00333EPSS