Photo Gallery (Unknown) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-20. Vendor: Unknown.
CVEs of Photo Gallery
- CVE-2026-81654 - CVSS 3.1 (low), 2026-09-20: The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options capability before saving image sizing…
- CVE-2026-81653 - CVSS 4.2 (medium), 2026-09-20: The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an image owns the gallery it belongs to,…
- CVE-2026-81651 - CVSS 3.1 (low), 2026-09-20: The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user saving a gallery owns it, allowing any user granted its…
- CVE-2026-81650 - CVSS 7.2 (high), 2026-09-20: The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive,…
- CVE-2026-81652 - CVSS 2.7 (low), 2026-09-20: The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is entitled to a given image record before…
- CVE-2024-13384 - CVSS 4.8 (medium), 2025-05-15: The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.24 does not sanitise and escape some of its settings, which could allow…
- CVE-2024-10144 - CVSS 4.8 (medium), 2025-05-15: The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its settings, which could allow…
- CVE-2024-10545 - CVSS 3.5 (low), 2025-02-25: The Photo Gallery, Sliders, Proofing and WordPress plugin before 3.59.9 does not sanitise and escape some of its Image settings, which could allow high…
- CVE-2024-10102 - CVSS 2.7 (low), 2025-01-07: The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its Gallery settings, which could…
- CVE-2024-6393 - CVSS 4.8 (medium), 2024-11-25: The Photo Gallery, Sliders, Proofing and WordPress plugin before 3.59.5 does not sanitise and escape some of its Images settings, which could allow high…
- CVE-2024-5442 - CVSS 5.9 (medium), 2024-07-13: The Photo Gallery, Sliders, Proofing and WordPress plugin before 3.59.3 does not sanitise and escape some of its settings, which could allow high privilege…
- CVE-2023-3499 - CVSS 4.8 (medium), 2023-09-04: The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.16 does not sanitise and escape some of its settings, which could allow…