Photo Gallery by 10Web – Mobile-Friendly Image Gallery vulnerabilities

Product

Photo Gallery by 10Web – Mobile-Friendly Image Gallery

by 10web · last CVE Oct 15, 2026

CVEs

On KEV

6.5

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 7Low 0

Severity

Exploitation

Watch

Add Photo Gallery by 10Web – Mobile-Friendly Image Gallery to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-85652	6.5	1%	Sep 18	Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute Affected: through 1.8.44
CVE-2026-9829	6.5	0%	Jun 6	Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter Affected: through 1.8.41
CVE-2026-7048	6.5	1%	May 28	Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute Affected: through 1.8.40
CVE-2026-86311	6.4	0%	Sep 17	Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Affected: through 1.8.44
CVE-2026-18557	6.1	0%	Oct 15	Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter Affected: through 1.8.42
CVE-2026-92974	6.1	0%	Oct 3	Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter Affected: through 1.8.46
CVE-2026-1036	5.3	0%	Jan 21	Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion Affected: through 1.8.36