Skip to contentContest-gallery Contest Gallery vulnerabilities
- contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 moreContest Gallery <= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id ParameterCVE-2025-38626.4 Medium
- contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 morePhotos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 26.0.0.1 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-15137.2 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 25.1.0 - SQL Injection vulnerabilityCVE-2025-226937.6 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 24.0.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-562375.9 Medium
- contest-gallery contest gallery, contest gallery gallery, contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe +2 moreContest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account TakeoverCVE-2024-111039.8 Critical
- contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 morePhotos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL InjectionCVE-2024-106879.8 Critical
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerabilityCVE-2024-432835.3 Medium
- contest-gallery contest gallery, contest gallery gallery +1 moreWordPress Contest Gallery plugin <= 23.1.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-396317.1 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 21.3.4 - Arbitrary File Deletion vulnerabilityCVE-2024-327788.5 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 24.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-304287.1 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 21.3.4 - SQL Injection vulnerabilityCVE-2024-302368.5 High
- contest-gallery contest galleryWordPress Photos and Files Contest Gallery plugin <= 21.3.2 - SQL Injection vulnerabilityCVE-2024-302388.5 High
- contest-gallery contest gallery, unknown photos and files contest gallery +1 morePhotos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site ScriptingCVE-2024-14875.4 Medium
- contest gallery photos and files contest gallery – contact form, upload form, social share and voting plugin for wordpress, contest-gallery contest gallery +1 moreWordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2024-248875.4 Medium
- contest-gallery contest gallery, unknown photos and files contest gallery +1 morePhotos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP HeadersCVE-2023-53076.1 Medium
- contest gallery gallery, contest-gallery contest gallery +1 moreWordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-287847.1 High
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41606.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5.1 - Author+ SQL InjectionCVE-2022-41596.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Admin+ SQL InjectionCVE-2022-41516.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41526.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41626.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41646.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5.1 - Unauthenticated SQL InjectionCVE-2022-41567.5 High
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41636.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery Pro < 19.1.5 - Admin+ SQL InjectionCVE-2022-41544.9 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41666.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41506.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Unauthenticated SQL InjectionCVE-2022-41587.5 High
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41656.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Admin+ SQL InjectionCVE-2022-41554.9 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Admin+ SQL InjectionCVE-2022-41574.9 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5.1 - Author+ SQL InjectionCVE-2022-41536.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41616.5 Medium
- contest gallery gallery, contest-gallery contest gallery +1 moreWordPress Contest Gallery Plugin <= 13.1.0.9 is vulnerable to Cross Site Scripting (XSS)CVE-2022-458486.1 Medium
- contest-gallery contest gallery, contest gallery (wordpress plugin) +1 moreWordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerabilityCVE-2022-363947.6 High
- contest gallery (wordpress plugin), contest-gallery contest gallery +1 moreWordPress Contest Gallery plugin <= 13.1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2022-278534.8 Medium
- contest-gallery contest galleryCross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5...CVE-2019-59748.8 High