Extension WordPress
Vulnérabilités Gmedia Photo Gallery
Cette page rassemble les failles publiées pour Gmedia Photo Gallery, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Gmedia Photo Gallery
10 fiches
Gmedia Photo Gallery <= 1.24.1 – Cross-Site Request Forgery
The Gmedia Photo Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.24.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated…
*-1.24.1
Non indiqué
31/12/2025
Gmedia Photo Gallery <= 1.23.0 – Authenticated (Contributor+) Local File Inclusion
The Gmedia Photo Gallery plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.23.0. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files…
*-1.23.0
1.24.0
27/06/2025
Gmedia Photo Gallery < 1.20.0 – Authenticated (Admin+) Stored Cross-Site Scripting
The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, which could allow high privilege users such as admin to perform Cross-Site Scripting…
[*, 1.20.0)
1.20.0
25/04/2022
Gmedia Photo Gallery <= 1.18.4 – Cross-Site Scripting
The Gmedia Photo Gallery plugin for WordPress is vulnerable to Cross-Site Scripting in versions before 1.18.5 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in…
[*, 1.18.5)
1.18.5
27/04/2020
Gmedia Photo Gallery <= 1.6.4 – Local File Inclusion
The Gmedia Photo Gallery plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.6.4. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the…
[*, 1.6.5)
1.6.5
27/05/2015
Gmedia Photo Gallery <= 1.6.4 – Denial of Service
The Gmedia Photo Gallery plugin for WordPress is vulnerable to Denial of Service in versions up to, and including, 1.6.4. This is due to improper redirect handling. This makes it possible for unauthenticated attackers to send requests that…
[*, 1.6.5)
1.6.5
27/05/2015
Gmedia Photo Gallery <= 1.6.4 – Open Proxy
The Gmedia Photo Gallery plugin for WordPress is vulnerable to Open Proxy attacks in versions up to, and including, 1.6.4. This is due to inclusion of a script intended to load images from a url that doesn't end…
[*, 1.6.5)
1.6.5
27/05/2015
Gmedia Photo Gallery <= 1.6.4 – Cross-Site Scripting
The Gmedia Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…
*-1.6.4
1.6.5
27/05/2015
Gmedia Photo Gallery < 1.2.2 – Arbitrary File Upload
The Gmedia Photo Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the addmedia.php file in versions before 1.2.2. This makes it possible for attackers to upload arbitrary files on…
[*, 1.2.2)
1.2.2
02/08/2014
Gmedia Photo Gallery < 0.9.4 – Reflected Cross-Site Scripting
The Gmedia Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 0.9.3 due to inclusion of a vulnerable version of jPlayer. This makes it possible for unauthenticated attackers to inject…
*-0.9.3
0.9.4
25/05/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.