Gallery vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

GA

Product

Gallery

by Wpdevart · last CVE Jan 2, 2025

7

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 0High 1Medium 6Low 0

Severity

All severities7 Critical0 High1 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Gallery to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-37542	6.3	0%	Jul 6	WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability Affected: through 2.0.3
CVE-2024-30550	6.1	0%	Mar 31	WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 2.0.3
CVE-2023-45630	6.1	0%	Oct 18	Unauth. Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 versions Affected: through 2.0.3
CVE-2022-1946	6.1	2%	Jul 4	The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated… Affected: before 2.0.0
CVE-2023-45631	5.4	0%	Jan 2	WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability Affected: through 2.0.3
CVE-2024-31120	5.4	0%	Mar 31	WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability Affected: through 2.0.3