LCweb

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

LCweb records in CISA KEV

No LCweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Global Gallery 1 record LOW Privatecontent 1 record LOW

Records

1 record in Global Gallery · all components

TI-2024-12840 CVE-2024-13814 · GHSA-wfvp-5m8q-8r33

Global Gallery - WordPress Responsive Gallery <= 9.1.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

LOW 39

The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00527 Published 2025-02-12 No fix listed CWE-94

Open these records in search →

Critical	1
High	3
Medium	2
Low	0
No CVSS	0