Photo Gallery By 10web (Unknown) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-02. Vendor: Unknown.
CVEs of Photo Gallery By 10web
- CVE-2026-12865 - CVSS 7.1 (high), 2026-09-02: The Photo Gallery by 10Web WordPress plugin before 1.8.44 does not escape two request parameters before reflecting them into input-attribute values on its…
- CVE-2024-8670 - CVSS 4.8 (medium), 2025-05-15: The Photo Gallery by 10Web WordPress plugin before 1.8.29 does not sanitise and escape some of its settings, which could allow high privilege users such as…
- CVE-2025-0613 - CVSS 6.1 (medium), 2025-03-31: The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to an…
- CVE-2024-13124 - CVSS 3.5 (low), 2025-03-24: The Photo Gallery by 10Web WordPress plugin before 1.8.33 does not sanitise and escape some of its settings, which could allow high privilege users such as…
- CVE-2024-10704 - CVSS 4.8 (medium), 2024-11-29: The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings, which could allow high privilege users such as…
- CVE-2024-5968 - CVSS 4.8 (medium), 2024-10-09: The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its Gallery settings, which could allow high privilege…
- CVE-2023-1427 - CVSS 4.9 (medium), 2023-04-17: - The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploads folder, allowing high privilege…
- CVE-2022-4058 - CVSS 5.4 (medium), 2022-12-19: The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS code later on in…
- CVE-2021-24139 - CVSS 9.8 (critical), 2021-03-18: Unvalidated input in the Photo Gallery (10Web Photo Gallery) WordPress plugin, versions before 1.5.55, leads to SQL injection via the…
