Extension WordPress
Vulnérabilités Gallery – Image and Video Gallery with Thumbnails
Cette page rassemble les failles publiées pour Gallery – Image and Video Gallery with Thumbnails, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Gallery – Image and Video Gallery with Thumbnails
9 fiches
Gallery – Image and Video Gallery with Thumbnails <= 2.0.3 – Authenticated (Contributor+) SQL Injection
The Gallery – Image and Video Gallery with Thumbnails plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient…
*-2.0.3
Non indiqué
06/06/2024
Responsive Image Gallery, Gallery Album <= 2.0.3 – Reflected Cross-Site Scripting
The Responsive Image Gallery, Gallery Album plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-2.0.3
Non indiqué
29/03/2024
Responsive Image Gallery, Gallery Album <= 2.0.3 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Responsive Image Gallery, Gallery Album plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
*-2.0.3
Non indiqué
29/03/2024
Responsive Image Gallery, Gallery Album <= 2.0.3 – Missing Authorization via Multiple AJAX Actions
The Responsive Image Gallery, Gallery Album plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to missing capability checks on multiple AJAX functions in versions up to, and including, 2.0.3. This makes…
*-2.0.3
Non indiqué
11/10/2023
Responsive Image Gallery, Gallery Album <= 2.0.3 – Unauthenticated Cross-Site Scripting
The Responsive Image Gallery, Gallery Album plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…
*-2.0.3
Non indiqué
11/10/2023
Responsive Image Gallery, Gallery Album <= 2.0.3 – Cross-Site Request Forgery
The Responsive Image Gallery, Gallery Album plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.3. This is due to missing or incorrect nonce validation multiple functions. This makes it possible for…
*-2.0.3
Non indiqué
11/10/2023
Gallery – Image and Video Gallery with Thumbnails <= 2.0.1 – Unauthenticated Stored Cross-Site Scripting
The Responsive Image and video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘$_GET["id"]’ parameter in versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible…
*-2.0.1
2.0.2
03/02/2023
Gallery – Image and Video Gallery with Thumbnails <= 1.9.9 – Reflected Cross-Site Scripting
The Gallery – Image and Video Gallery with Thumbnails plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.9.9 due to insufficient input sanitization and output escaping on the gallery_current_index parameter supplied…
*-1.9.9
2.0.0
13/06/2022
Gallery – Image and Video Gallery with Thumbnails < 1.2.1 – SQL Injection
SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an add_edit_theme task in the wpdevart_gallery_themes page to wp-admin/admin.php.
[*, 1.2.1)
1.2.1
22/09/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.