Login Request a demo
MI
Product
Modula Image Gallery – Photo Grid & Video Gallery
by wpchill · last CVE Oct 16, 2026
9
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 4Medium 5Low 0
Severity
All severities9Critical0High4Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Modula Image Gallery – Photo Grid & Video Gallery to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-12853
8.8
1%
Jan 8
Modula Image Gallery <= 2.11.10 - Authenticated (Author+) Arbitrary File Upload
Affected: through 2.11.10
CVE-2026-92713
8.1
0%
Sep 25
Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter
Affected: through 3.0.2
CVE-2026-107659
7.5
0%
Oct 16
Modula Image Gallery <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Exposed 'modulaSettings' REST field on the modula-gallery CPT
Affected: through 3.0.11
CVE-2026-89406
7.5
0%
Sep 25
Modula Image Gallery <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure via 'modula_gallery_id' and 'modula_image_id' Parameters
Affected: through 3.0.1
CVE-2025-13891
6.5
0%
Dec 12
Image Gallery – Photo Grid & Video Gallery (Modula) <= 2.13.3 - Missing Authorization to Arbitrary Directory Listing
Affected: through 2.13.3
CVE-2024-9416
5.4
0%
Apr 3
Modula Image Gallery <= 2.10.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library
Affected: through 2.10.1
CVE-2026-1254
4.3
0%
Feb 14
Modula Image Gallery – Photo Grid & Video Gallery <= 2.13.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post/Page Editing
Affected: through 2.13.6
CVE-2025-14003
4.3
0%
Dec 15
Image Gallery – Photo Grid & Video Gallery <= 2.13.3 - Missing Authorization to Authenticated (Author+) Arbitrary Gallery Modification
Affected: through 2.13.3
CVE-2025-12494
4.3
0%
Nov 15
Image Gallery – Photo Grid & Video Gallery <= 2.12.28 - Improper Authorization to Authenticated (Author+) Arbitrary Image File Move
Affected: through 2.12.28
Showing 9