Skip to contentVideowhisper Picture Gallery vulnerabilities
- picture-gallery picture galleryWordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerabilityCVE-2026-576967.1 High
- picture-gallery picture galleryWordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerabilityCVE-2025-265817.1 High
- videowhisper picture gallery – frontend image uploads, ajax photo list, picture gallery +1 morePicture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-135846.4 Medium
- videowhisper picture gallery – frontend image uploads, ajax photo listPicture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest ShortcodeCVE-2024-126966.4 Medium
- picture-gallery picture galleryWordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-347596.5 Medium