Skip to content

Contest-gallery vulnerabilities

Products

Newest

contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameter CVE-2026-78088 8.8 HighSeptember 16, 2026
contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId' CVE-2026-16586 6.5 MediumAugust 15, 2026
contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter CVE-2026-12165 8.8 HighJune 17, 2026
contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Contest Gallery <= 28.1.6 - Unauthenticated SQL Injection CVE-2026-8912 7.5 HighMay 19, 2026
contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Contest Gallery <= 28.1.5 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion CVE-2026-4021 8.1 HighMarch 23, 2026
contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Contest Gallery <= 28.1.4 - Unauthenticated SQL Injection CVE-2026-3180 Public exploit 7.5 HighMarch 2, 2026
contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Contest Gallery <= 28.0.2 - Missing Authorization CVE-2025-12849 5.3 MediumNovember 15, 2025
contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injection CVE-2025-11254 4.3 MediumOctober 11, 2025
contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2025-10383 6.4 MediumOctober 4, 2025
contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI <= 26.1.0 - Unauthenticated Stored Cross-Site Scri… CVE-2025-7725 7.2 HighAugust 1, 2025
contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe Contest Gallery <= 26.0.8 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2025-6716 6.4 MediumJuly 11, 2025
contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 more Contest Gallery <= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter CVE-2025-3862 6.4 MediumMay 8, 2025
contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 more Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 26.0.0.1 - Unauthenticated Stored Cross-Site Scripting CVE-2025-1513 7.2 HighFebruary 28, 2025
contest-gallery contest gallery WordPress Contest Gallery plugin <= 25.1.0 - SQL Injection vulnerability CVE-2025-22693 7.6 HighFebruary 3, 2025
contest-gallery contest gallery WordPress Contest Gallery plugin <= 24.0.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-56237 5.9 MediumJanuary 2, 2025
contest-gallery contest gallery, contest gallery gallery, contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe +2 more Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover CVE-2024-11103 9.8 CriticalNovember 28, 2024
contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 more Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injection CVE-2024-10687 9.8 CriticalNovember 5, 2024
contest-gallery contest gallery WordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerability CVE-2024-43283 5.3 MediumAugust 26, 2024
contest-gallery contest gallery, contest gallery gallery +1 more WordPress Contest Gallery plugin <= 23.1.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-39631 7.1 HighAugust 1, 2024
contest-gallery contest gallery WordPress Contest Gallery plugin <= 21.3.4 - Arbitrary File Deletion vulnerability CVE-2024-32778 8.5 HighJune 9, 2024
contest-gallery contest gallery WordPress Contest Gallery plugin <= 24.0.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-30428 7.1 HighMarch 29, 2024
contest-gallery contest gallery WordPress Contest Gallery plugin <= 21.3.4 - SQL Injection vulnerability CVE-2024-30236 8.5 HighMarch 28, 2024
contest-gallery contest gallery WordPress Photos and Files Contest Gallery plugin <= 21.3.2 - SQL Injection vulnerability CVE-2024-30238 8.5 HighMarch 27, 2024
contest-gallery contest gallery, unknown photos and files contest gallery +1 more Photos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site Scripting CVE-2024-1487 5.4 MediumMarch 11, 2024
contest gallery photos and files contest gallery – contact form, upload form, social share and voting plugin for wordpress, contest-gallery contest gallery +1 more WordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2024-24887 5.4 MediumFebruary 12, 2024
contest-gallery contest gallery, unknown photos and files contest gallery +1 more Photos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP Headers CVE-2023-5307 6.1 MediumOctober 31, 2023
contest gallery gallery, contest-gallery contest gallery +1 more WordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-28784 7.1 HighJune 22, 2023
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Author+ SQL Injection CVE-2022-4160 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5.1 - Author+ SQL Injection CVE-2022-4159 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Admin+ SQL Injection CVE-2022-4151 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Author+ SQL Injection CVE-2022-4152 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Author+ SQL Injection CVE-2022-4162 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Author+ SQL Injection CVE-2022-4164 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5.1 - Unauthenticated SQL Injection CVE-2022-4156 7.5 HighDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Author+ SQL Injection CVE-2022-4163 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery Pro < 19.1.5 - Admin+ SQL Injection CVE-2022-4154 4.9 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Author+ SQL Injection CVE-2022-4166 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Author+ SQL Injection CVE-2022-4150 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Unauthenticated SQL Injection CVE-2022-4158 7.5 HighDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Author+ SQL Injection CVE-2022-4165 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Admin+ SQL Injection CVE-2022-4155 4.9 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Admin+ SQL Injection CVE-2022-4157 4.9 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5.1 - Author+ SQL Injection CVE-2022-4153 6.5 MediumDecember 26, 2022
contest-gallery contest gallery, unknown contest gallery pro +1 more Contest Gallery < 19.1.5 - Author+ SQL Injection CVE-2022-4161 6.5 MediumDecember 26, 2022
contest gallery gallery, contest-gallery contest gallery +1 more WordPress Contest Gallery Plugin <= 13.1.0.9 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45848 6.1 MediumDecember 6, 2022
contest-gallery contest gallery, contest gallery (wordpress plugin) +1 more WordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerability CVE-2022-36394 7.6 HighAugust 23, 2022
contest gallery (wordpress plugin), contest-gallery contest gallery +1 more WordPress Contest Gallery plugin <= 13.1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability CVE-2022-27853 4.8 MediumApril 18, 2022
contest-gallery contest gallery Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5... CVE-2019-5974 8.8 HighJuly 5, 2019