Extension WordPress
Vulnérabilités Picture Gallery – Frontend Image Uploads, AJAX Photo List
Cette page rassemble les failles publiées pour Picture Gallery – Frontend Image Uploads, AJAX Photo List, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Picture Gallery – Frontend Image Uploads, AJAX Photo List
5 fiches
Picture Gallery <= 1.6.3 – Unauthenticated Stored Cross-Site Scripting
The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it…
*-1.6.3
1.6.4
12/03/2025
Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_pictures' shortcode in all versions up to, and including, 1.5.19 due to insufficient input sanitization and…
*-1.5.19
1.5.20
21/01/2025
Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.22 – Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest Shortcode
The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videowhisper_picture_upload_guest shortcode in all versions up to, and including, 1.5.22 due to insufficient input sanitization and…
*-1.5.22
1.5.23
17/01/2025
Picture Gallery <= 1.5.11 – Authenticated (Author+) Stored Cross-Site Scripting
The Picture Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.5.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and…
*-1.5.11
1.5.12
14/05/2024
Picture Gallery – Frontend Image Uploads, AJAX Photo List < 1.4.3 – Cross-Site Scripting
The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'p_videowhisper_content_edit' parameter in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping.…
*-1.4.2
1.4.3
10/08/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.