Skip to content10web Photo Gallery By 10web vulnerabilities
- 10web photo gallery by 10webPhoto Gallery by 10Web < 1.8.49 - Contributor+ Stored XSS via watermark_url Shortcode AttributeCVE-2026-1100726.8 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' ParameterCVE-2026-185576.1 Medium
- 10web photo gallery by 10webWordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-427157.1 High
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' ParameterCVE-2026-929746.1 Medium
- 10web photo gallery by 10webWordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerabilityCVE-2026-1023778.8 High
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode AttributeCVE-2026-856526.5 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesCVE-2026-863116.4 Medium
- 10web photo gallery by 10webPhoto Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged ParametersCVE-2026-128657.1 High
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode ParameterCVE-2026-98296.5 Medium
- 10web photo gallery by 10webWordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerabilityCVE-2026-497717.6 High
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode AttributeCVE-2026-70486.5 Medium
- 10web photo gallery by 10webWordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-323304.3 Medium
- 10web photo gallery by 10webWordPress Photo Gallery by 10Web plugin <= 1.8.38 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-273605.9 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment DeletionCVE-2026-10365.3 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.8.29 - Admin+ Stored XSSCVE-2024-86704.8 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' ParameterCVE-2025-22696.1 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery < 1.8.34 - Unauthenticated Stored XSSCVE-2025-06136.1 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.8.33 - Admin+ Stored XSSCVE-2024-131243.5 Low
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerabilityCVE-2023-339954.3 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery by 10web wordpress gallery by 10web wordpress +2 morePhoto Gallery by 10Web < 1.8.31 - Admin+ Stored XSSCVE-2024-107044.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-98784.4 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web <= 1.8.27 - Admin+ Stored XSSCVE-2024-59684.8 Medium
- 10web photo gallery by 10web, photo gallery +1 moreWordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440435.9 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.25 - Broken Access Control vulnerabilityCVE-2024-356284.3 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir FunctionCVE-2024-54816.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVGCVE-2024-54266.4 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.20 - Broken Access Control vulnerabilityCVE-2024-335865.3 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.21 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-325837.1 High
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVGCVE-2024-22965.5 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File RenameCVE-2024-02219.1 Critical
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via WidgetCVE-2023-69244.4 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.8.15 - Admin+ Path TraversalCVE-2023-14274.9 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery < 1.8.3 - Stored XSS via CSRFCVE-2022-40585.4 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.4 - Admin+ Stored Cross-Site ScriptingCVE-2022-13944.8 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.3 - Reflected Cross-Site ScriptingCVE-2022-12826.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.3 - Unauthenticated SQL InjectionCVE-2022-1281EPSS 43.4%9.8 Critical
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web < 1.6.0 - Unauthenticated SQL InjectionCVE-2022-0169Public exploitEPSS 74.6%9.8 Critical
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)CVE-2021-250416.1 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery < 1.5.75 - File Upload Path TraversalCVE-2021-243634.9 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery < 1.5.75 - Stored Cross-Site Scripting via Uploaded SVGCVE-2021-243626.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery TitleCVE-2021-243104.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery, photo gallery team gallery by 10web – mobile-friendly image gallery +2 morePhoto Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)CVE-2021-24291EPSS 14.5%6.1 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.5.55 - Unauthenticated SQL InjectionCVE-2021-241399.8 Critical