Photo Gallery By 10web Mobile-friendly Image Gallery (Unknown) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-06-08. Vendor: Unknown.

CVEs of Photo Gallery By 10web Mobile-friendly Image Gallery

• CVE-2022-1394 - CVSS 4.8 (medium), 2022-06-08: The Photo Gallery by 10Web WordPress plugin before 1.6.4 does not properly validate and escape some of its settings, which could allow high privilege users…
• CVE-2022-1282 - CVSS 6.1 (medium), 2022-05-02: The Photo Gallery by 10Web WordPress plugin before 1.6.3 does not properly sanitize the $_GET['image_url'] variable, which is reflected back to the users when…
• CVE-2022-1281 - CVSS 9.8 (critical), 2022-05-02: The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_POST['filter_tag'] parameter, which is appended to an SQL query, making SQL…
• CVE-2022-0169 - CVSS 9.8 (critical), 2022-03-14: The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL…
• CVE-2021-25041 - CVSS 6.1 (medium), 2021-12-06: The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues via the bwg_album_breadcrumb_0 and…
• CVE-2021-24363 - CVSS 4.9 (medium), 2021-08-16: The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded files are kept inside its uploads…
• CVE-2021-24362 - CVSS 6.1 (medium), 2021-08-16: The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded SVG files added to a gallery do not…