Contest Gallery (Unknown) - vulnerabilities (CVEs)
21 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-21. Vendor: Unknown.
CVEs of Contest Gallery
- CVE-2026-107447 - CVSS 5.3 (medium), 2026-10-21: The Contest Gallery WordPress plugin before 34.0.1 does not reliably validate the visitor identity used to enforce its one-vote-per-entry restriction,…
- CVE-2026-107120 - CVSS 5.3 (medium), 2026-10-10: The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which…
- CVE-2026-16055 - CVSS 7.5 (high), 2026-08-05: The Contest Gallery WordPress plugin before 30.0.7 does not route its front-end login through the standard WordPress authentication flow, issuing an…
- CVE-2026-16056 - CVSS 4.3 (medium), 2026-08-04: The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down…
- CVE-2026-16057 - CVSS 6.5 (medium), 2026-08-03: The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only…
- CVE-2022-4157 - CVSS 4.9 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_option_id POST parameter…
- CVE-2022-4160 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_copy_id POST parameter before…
- CVE-2022-4163 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_deactivate and cg_activate…
- CVE-2022-4166 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before…
- CVE-2022-4159 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_id POST parameter before…
- CVE-2022-4162 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_row POST parameter before…
- CVE-2022-4165 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_order POST parameter before…
- CVE-2022-4158 - CVSS 7.5 (high), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_Fields POST parameter before…
- CVE-2022-4161 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_copy_start POST parameter…
- CVE-2022-4164 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_multiple_files_for_post POST…
- CVE-2022-4152 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5, Contest Gallery Pro WordPress plugin before 19.1.5 do not escape the option_id POST parameter before…
- CVE-2022-4156 - CVSS 7.5 (high), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the user_id POST parameter before…
- CVE-2022-4151 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id GET parameter before…
- CVE-2022-4155 - CVSS 4.9 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the wp_user_id GET parameter before…
- CVE-2022-4150 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id POST parameter before…
- CVE-2022-4153 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the upload[] POST parameter before…
