Wasiliy Strecker / ContestGallery developer — Vulnerabilities & Security Advisories 15

Wasiliy Strecker develops ContestGallery, a WordPress plugin for managing photo and video contests. Historically, the plugin has been vulnerable to multiple security issues, including remote code execution, cross-site scripting, and privilege escalation vulnerabilities, contributing to 13 CVEs. Common weaknesses involve insufficient input validation and improper access controls. In 2023, a critical flaw allowed unauthenticated attackers to execute arbitrary code, leading to widespread exploitation. The plugin's frequent updates and complex functionality have introduced recurring security challenges, making it a persistent target for attackers. Strecker's codebase often requires immediate patching due to high-impact vulnerabilities affecting thousands of WordPress sites.