Skip to content10web Photo Gallery vulnerabilities
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.8.29 - Admin+ Stored XSSCVE-2024-86704.8 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery < 1.8.34 - Unauthenticated Stored XSSCVE-2025-06136.1 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.8.33 - Admin+ Stored XSSCVE-2024-131243.5 Low
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerabilityCVE-2023-339954.3 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery by 10web wordpress gallery by 10web wordpress +2 morePhoto Gallery by 10Web < 1.8.31 - Admin+ Stored XSSCVE-2024-107044.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-98784.4 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web <= 1.8.27 - Admin+ Stored XSSCVE-2024-59684.8 Medium
- 10web photo gallery by 10web, photo gallery +1 moreWordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440435.9 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.25 - Broken Access Control vulnerabilityCVE-2024-356284.3 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir FunctionCVE-2024-54816.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVGCVE-2024-54266.4 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.20 - Broken Access Control vulnerabilityCVE-2024-335865.3 Medium
- 10web photo gallery by 10web, photo gallery, photo gallery team gallery by 10web +2 moreWordPress Photo Gallery by 10Web plugin <= 1.8.21 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-325837.1 High
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVGCVE-2024-22965.5 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Stored Cross Site Scripting in UploadHandlerCVE-2024-298335.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg thumb_urlCVE-2024-298105.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg image_urlCVE-2024-298095.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg image_idCVE-2024-298085.4 Medium
- 10web photo gallery, photogallery +1 moreWordPress Photo Gallery Plugin <= 1.8.21 Unauthenticated Reflected Cross Site Scripting in GalleryBox current_urlCVE-2024-298326.1 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File RenameCVE-2024-02219.1 Critical
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via WidgetCVE-2023-69244.4 Medium
- 10web photo galleryThe 10Web Photo Gallery plugin through 1.5.69 for WordPress allows XSS via theme_id for...CVE-2021-468896.1 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.8.15 - Admin+ Path TraversalCVE-2023-14274.9 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery < 1.8.3 - Stored XSS via CSRFCVE-2022-40585.4 Medium
- 10web photo galleryVMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service...CVE-2021-316936.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.4 - Admin+ Stored Cross-Site ScriptingCVE-2022-13944.8 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.3 - Reflected Cross-Site ScriptingCVE-2022-12826.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.3 - Unauthenticated SQL InjectionCVE-2022-1281EPSS 43.4%9.8 Critical
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web < 1.6.0 - Unauthenticated SQL InjectionCVE-2022-0169Public exploitEPSS 74.6%9.8 Critical
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)CVE-2021-250416.1 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery < 1.5.75 - File Upload Path TraversalCVE-2021-243634.9 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery +1 morePhoto Gallery < 1.5.75 - Stored Cross-Site Scripting via Uploaded SVGCVE-2021-243626.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery TitleCVE-2021-243104.8 Medium
- 10web photo gallery by 10web – mobile-friendly image gallery, photo gallery, photo gallery team gallery by 10web – mobile-friendly image gallery +2 morePhoto Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)CVE-2021-24291EPSS 14.5%6.1 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery by 10Web < 1.5.55 - Unauthenticated SQL InjectionCVE-2021-241399.8 Critical
- 10web photo galleryMultiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46...CVE-2020-93354.8 Medium
- 10web photo galleryMultiple cross-site scripting (XSS) vulnerabilities in the Photo Gallery plugin before 1.2.11 for...CVE-2015-13945.4 Medium
- 10web photo galleryCross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for...CVE-2019-16117Public exploit6.1 Medium
- 10web photo galleryCross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for...CVE-2019-16118Public exploit6.1 Medium
- 10web photo gallerySQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress...CVE-2019-16119Public exploitEPSS 24.8%9.8 Critical
- 10web photo galleryThe photo-gallery plugin before 1.2.42 for WordPress has CSRF.CVE-2015-93808.8 High
- 10web photo galleryThe 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS.CVE-2019-147975.4 Medium
- 10web photo galleryThe 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion...CVE-2019-147984.9 Medium
- 10web photo galleryA SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for...CVE-2019-143139.8 Critical
- 10web photo galleryCross-site scripting (XSS) vulnerability in the filemanager in the Photo Gallery plugin before 1...CVE-2015-23245.4 Medium
- 10web photo galleryUnrestricted File Upload vulnerability in Photo Gallery 1.2.5.CVE-2014-9312Public exploitEPSS 45.4%8.8 High
- 10web photo galleryThe Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for...CVE-2017-129777.2 High
- 10web photo gallerySQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote...CVE-2015-13936.5 Medium
- 10web photo gallerySQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote...CVE-2015-10557.5 High