Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Photo Gallery by 10Web — Vulnerabilities & Security Advisories 18

All 18 CVE vulnerabilities found in Photo Gallery by 10Web, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability records for the Photo Gallery plugin developed by 10Web, focusing on specific weakness types and associated tags. The collection compiles reported security flaws affecting various versions of this WordPress extension, covering the period from the plugin's initial release through the most recent disclosed advisories. Readers can use this resource to track vendor-published security updates, analyze the evolution of specific weakness classes within the codebase, and review the complete vulnerability history for this particular product. By consolidating disparate data points into a single view, this section facilitates a comprehensive understanding of the security posture for Photo Gallery by 10Web, allowing stakeholders to identify recurring issues or assess the frequency of critical exposures over time. The information serves as a reference point for security teams, developers, and auditors who need to monitor changes in the software’s risk profile without navigating multiple individual advisories. This structured aggregation ensures that all documented incidents are accessible, enabling a clear perspective on how the product has evolved in terms of security resilience.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-102377 WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability CWE-502 8.8 High 2026-09-30
CVE-2026-12865 Photo Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged Parameters - - 2026-09-02
CVE-2026-49771 WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability CWE-89 7.6 High 2026-06-04
CVE-2026-32330 WordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2026-03-13
CVE-2026-27360 WordPress Photo Gallery by 10Web plugin <= 1.8.38 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium 2026-02-19
CVE-2024-8670 Photo Gallery by 10Web < 1.8.29 - Admin+ Stored XSS 4.8AI Medium AI 2025-05-15
CVE-2025-0613 Photo Gallery < 1.8.34 - Unauthenticated Stored XSS 6.1 - 2025-03-31
CVE-2024-13124 Photo Gallery by 10Web < 1.8.33 - Admin+ Stored XSS 4.8AI Medium AI 2025-03-24
CVE-2023-33995 WordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-12-13
CVE-2024-10704 Photo Gallery by 10Web < 1.8.31 - Admin+ Stored XSS 4.8 - 2024-11-29
CVE-2024-5968 Photo Gallery by 10Web <= 1.8.27 - Admin+ Stored XSS 4.8AI Medium AI 2024-10-09
CVE-2024-44043 WordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium 2024-10-06
CVE-2024-35628 WordPress Photo Gallery by 10Web plugin <= 1.8.25 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-06-11
CVE-2024-33586 WordPress Photo Gallery by 10Web plugin <= 1.8.20 - Broken Access Control vulnerability CWE-862 5.3 Medium 2024-04-29
CVE-2024-32583 WordPress Photo Gallery by 10Web plugin <= 1.8.21 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-04-18
CVE-2023-1427 Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal 4.9 - 2023-04-17
CVE-2022-4058 Photo Gallery < 1.8.3 - Stored XSS via CSRF 5.4 - 2022-12-19
CVE-2021-24139 Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection CWE-89 9.8 - 2021-03-18

All 18 known CVE vulnerabilities affecting Photo Gallery by 10Web with full Chinese analysis, references, and POCs where available.