Skip to contentWasiliy Strecker / Contestgallery Developer Contest Gallery vulnerabilities
- unknown contest galleryContest Gallery < 34.0.3 - Author+ Arbitrary File Upload via Ecommerce Sale File ReplacementCVE-2026-1180418.8 High
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 34.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1118376.5 Medium
- unknown contest galleryContest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter IdentityCVE-2026-1074475.3 Medium
- unknown contest galleryContest Gallery < 33.0.1 - Unauthenticated Email Verification Bypass via Brute-Forceable Registration PINCVE-2026-1071205.3 Medium
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 30.0.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-619867.1 High
- unknown contest galleryContest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_loginCVE-2026-160557.5 High
- unknown contest galleryContest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_promptsCVE-2026-160564.3 Medium
- unknown contest galleryContest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_libraryCVE-2026-160576.5 Medium
- wasiliy strecker / contestgallery developer contest galleryWordPress Contest Gallery plugin <= 30.0.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-654477.1 High
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 30.0.0 - SQL Injection vulnerabilityCVE-2026-576628.5 High
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerabilityCVE-2026-426606.5 Medium
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerabilityCVE-2026-426576.5 Medium
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 28.1.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-426566.5 Medium
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 28.1.6 - SQL Injection vulnerabilityCVE-2026-407719.3 Critical
- unknown contest gallery proWordPress Contest Gallery Pro plugin <= 29.0.1 - Privilege Escalation vulnerabilityCVE-2026-426809.8 Critical
- wasiliy strecker / contestgallery developer contest galleryWordPress Contest Gallery plugin <= 28.1.2.2 - Account Takeover vulnerabilityCVE-2026-250359.8 Critical
- wasiliy strecker / contestgallery developer contest galleryWordPress Contest Gallery plugin <= 28.1.2.1 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2026-249646.4 Medium
- wasiliy strecker / contestgallery developer contest galleryWordPress Contest Gallery plugin <= 28.1.1 - Broken Access Control vulnerabilityCVE-2026-249654.3 Medium
- wasiliy strecker / contestgallery developer contest galleryWordPress Contest Gallery plugin <= 28.0.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-62950Public exploit4.3 Medium
- wasiliy strecker / contestgallery developer contest galleryWordPress Contest Gallery <= 26.0.6 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-482917.1 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 25.1.0 - SQL Injection vulnerabilityCVE-2025-226937.6 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 24.0.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-562375.9 Medium
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerabilityCVE-2024-432835.3 Medium
- contest-gallery contest gallery, contest gallery gallery +1 moreWordPress Contest Gallery plugin <= 23.1.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-396317.1 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 21.3.4 - Arbitrary File Deletion vulnerabilityCVE-2024-327788.5 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 24.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-304287.1 High
- contest-gallery contest galleryWordPress Contest Gallery plugin <= 21.3.4 - SQL Injection vulnerabilityCVE-2024-302368.5 High
- contest-gallery contest galleryWordPress Photos and Files Contest Gallery plugin <= 21.3.2 - SQL Injection vulnerabilityCVE-2024-302388.5 High
- contest gallery gallery, contest-gallery contest gallery +1 moreWordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-287847.1 High
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41606.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5.1 - Author+ SQL InjectionCVE-2022-41596.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Admin+ SQL InjectionCVE-2022-41516.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41526.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41626.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41646.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5.1 - Unauthenticated SQL InjectionCVE-2022-41567.5 High
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41636.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41666.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41506.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Unauthenticated SQL InjectionCVE-2022-41587.5 High
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41656.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Admin+ SQL InjectionCVE-2022-41554.9 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Admin+ SQL InjectionCVE-2022-41574.9 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5.1 - Author+ SQL InjectionCVE-2022-41536.5 Medium
- contest-gallery contest gallery, unknown contest gallery pro +1 moreContest Gallery < 19.1.5 - Author+ SQL InjectionCVE-2022-41616.5 Medium
- contest gallery gallery, contest-gallery contest gallery +1 moreWordPress Contest Gallery Plugin <= 13.1.0.9 is vulnerable to Cross Site Scripting (XSS)CVE-2022-458486.1 Medium
- contest-gallery contest galleryCross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5...CVE-2019-59748.8 High