Notfound Gallery vulnerabilities

• bestwebsoft gallery WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability CVE-2026-57642 8.5 HighJune 26, 2026
• lcweb global gallery WordPress Global Gallery plugin <= 8.8.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-22263 7.1 HighApril 15, 2025
• extendyourweb ultimate video gallery WordPress ULTIMATE VIDEO GALLERY Plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-22566 7.1 HighMarch 28, 2025
• notfound nextgen gallery voting WordPress NextGEN Gallery Voting plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-28869 7.1 HighMarch 26, 2025
• notfound easy gallery WordPress Easy Gallery plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-23487 7.1 HighMarch 3, 2025
• dkukral attach gallery posts WordPress Attach Gallery Posts plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-23441 7.1 HighMarch 3, 2025
• jordy meow gallery WordPress Gallery Custom Links Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-26778 5.9 MediumFebruary 17, 2025
• notfound singsys -awesome gallery, singsys -awesome gallery +1 more WordPress Singsys -Awesome Gallery plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-23748 7.1 HighFebruary 14, 2025
• notfound foogallery captions WordPress FooGallery Captions Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-23889 7.1 HighJanuary 24, 2025
• crudlab image gallery box by crudlab WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability CVE-2025-23938 7.5 HighJanuary 22, 2025
• notfound gallery Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection CVE-2024-11501 8.8 HighDecember 7, 2024
• notfound easy gallery WordPress Easy Gallery plugin <= 1.4 - SQL Injection vulnerability CVE-2024-51570 8.5 HighNovember 9, 2024
• notfound gallery Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows... CVE-2024-20827 4.6 MediumFebruary 6, 2024
• notfound gallery Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to... CVE-2023-30725 5.1 MediumSeptember 6, 2023
• notfound gallery Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows... CVE-2023-30724 4.0 MediumSeptember 6, 2023
• notfound gallery Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute... CVE-2021-25379 4.0 MediumApril 9, 2021
• gallery plugin authors gallery Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability CVE-2012-4919 9.8 CriticalJanuary 22, 2020
• modx revolution, modx revolution gallery +1 more MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous... CVE-2019-1010123 7.5 HighJuly 23, 2019
• bestweblayout portfolio, bestwebsoft captcha, car rental +51 more +53 more Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version... CVE-2017-2171 6.1 MediumMay 22, 2017