Skip to content10web Photo Gallery By 10web – Mobile-friendly Image Gallery vulnerabilities
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' ParameterCVE-2026-185576.1 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' ParameterCVE-2026-929746.1 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode AttributeCVE-2026-856526.5 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesCVE-2026-863116.4 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode ParameterCVE-2026-98296.5 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode AttributeCVE-2026-70486.5 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment DeletionCVE-2026-10365.3 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' ParameterCVE-2025-22696.1 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-98784.4 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir FunctionCVE-2024-54816.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVGCVE-2024-54266.4 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVGCVE-2024-22965.5 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File RenameCVE-2024-02219.1 Critical
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via WidgetCVE-2023-69244.4 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.4 - Admin+ Stored Cross-Site ScriptingCVE-2022-13944.8 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.3 - Reflected Cross-Site ScriptingCVE-2022-12826.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.3 - Unauthenticated SQL InjectionCVE-2022-1281EPSS 43.4%9.8 Critical
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web < 1.6.0 - Unauthenticated SQL InjectionCVE-2022-0169Public exploitEPSS 74.6%9.8 Critical
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)CVE-2021-250416.1 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery < 1.5.75 - File Upload Path TraversalCVE-2021-243634.9 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery < 1.5.75 - Stored Cross-Site Scripting via Uploaded SVGCVE-2021-243626.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery TitleCVE-2021-243104.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery, photo gallery team gallery by 10web – mobile-friendly image gallery +2 morePhoto Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)CVE-2021-24291EPSS 14.5%6.1 Medium