| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2021-25090 | GridKit Portfolio < 2.1.0 - Subscriber+ Stored Cross-Site Scripting | Unknown | Portfolio Gallery, Product Catalog – Grid KIT Portfolio | 中危 | - | 2022-04-11 14:40:38 | Deep Dive |
| CVE-2022-0750 | Photoswipe Masonry Gallery <= 1.2.14 Stored Cross-Site Scripting | deanoakley | Photoswipe Masonry Gallery | Medium | 6.4 | 2022-03-23 19:46:50 | Deep Dive |
| CVE-2022-0423 | 3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting | Unknown | 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery | 中危 | - | 2022-03-21 18:55:45 | Deep Dive |
| CVE-2022-0169 | Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection | Unknown | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 超危 | - | 2022-03-14 14:41:22 | Deep Dive |
| CVE-2021-24903 | GRAND FlaGallery <= 6.1.2 - Admin+ Stored Cross-Site Scripting | Unknown | Album and Image Gallery with Lightbox – Flagallery Photo Portfolio | 中危 | - | 2022-02-28 09:06:18 | Deep Dive |
| CVE-2022-0186 | Image Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting | Unknown | Image Photo Gallery Final Tiles Grid | 中危 | - | 2022-02-21 10:46:02 | Deep Dive |
| CVE-2021-24867 | Backdoored Plugins & Themes from AccessPress Themes | AccessPress Themes | Frontend Post WordPress Plugin – AccessPress Anonymous Post | 超危 | - | 2022-02-21 10:45:39 | Deep Dive |
| CVE-2021-25031 | Image Hover Effects Ultimate < 9.7.1 - Reflected Cross-Site Scripting | Unknown | Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) | 中危 | - | 2022-01-24 08:01:14 | Deep Dive |
| CVE-2021-24909 | ACF Photo Gallery Field < 1.7.5 - Reflected Cross-Site Scripting | Unknown | ACF Photo Gallery Field | 中危 | - | 2022-01-17 13:00:28 | Deep Dive |
| CVE-2021-24739 | Logo Carousel < 3.4.2 - Unauthorised Private Post Access | Unknown | Logo Carousel – Logo Slider, Logo Showcase, and Clients Logo Gallery | 高危 | - | 2021-12-21 08:45:28 | Deep Dive |
| CVE-2021-24738 | Logo Carousel < 3.4.2 - Contributor+ Stored Cross-Site Scripting | Unknown | Logo Carousel – Logo Slider, Logo Showcase, and Clients Logo Gallery | 中危 | - | 2021-12-21 08:45:26 | Deep Dive |
| CVE-2021-39313 | Simple Image Gallery <= 1.0.6 Reflected Cross-Site Scripting | Simple Image Gallery | Simple Image Gallery | Medium | 6.1 | 2021-12-14 15:50:19 | Deep Dive |
| CVE-2021-24970 | All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion | Unknown | All-in-One Video Gallery | 高危 | - | 2021-12-13 10:41:31 | Deep Dive |
| CVE-2021-24795 | Filter Portfolio Gallery <= 1.5 - Arbitrary Gallery Deletion via CSRF | Unknown | Filter Portfolio Gallery | 中危 | - | 2021-12-13 10:40:57 | Deep Dive |
| CVE-2021-25041 | Photo Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS) | Unknown | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 中危 | - | 2021-12-06 15:55:40 | Deep Dive |
| CVE-2021-24915 | Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure | Unknown | Contest Gallery – Photo Contest Plugin for WordPress | 超危 | - | 2021-11-29 08:25:50 | Deep Dive |
| CVE-2021-24882 | Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site Scripting | Unknown | Slideshow Gallery | 中危 | - | 2021-11-23 19:16:19 | Deep Dive |
| CVE-2021-24515 | Video Gallery - Vimeo and YouTube Gallery < 1.1.5 - Admin+ Stored Cross-Site Scripting | Unknown | Video Gallery - Vimeo and YouTube Gallery | 中危 | - | 2021-10-25 13:20:41 | Deep Dive |
| CVE-2021-24752 | Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change | CatchThemes | Essential Widgets | 中危 | - | 2021-10-18 13:46:10 | Deep Dive |
| CVE-2021-24415 | Polo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site Scripting | Unknown | Polo Video Gallery – Best wordpress video gallery plugin | 中危 | - | 2021-10-18 13:45:40 | Deep Dive |