Easy Image Gallery (Devrix) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-03-25. Vendor: Devrix.

CVEs of Easy Image Gallery

• CVE-2026-4766 - CVSS 6.4 (medium), 2026-03-25: The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and…
• CVE-2025-2540 - CVSS 6.4 (medium), 2025-07-03: Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled prettyPhoto library (version 3.1.6) in various versions…