Simplygallery

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Simplygallery records in CISA KEV

No Simplygallery vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simply Gallery Blocks With Lightbox 2 records HIGH

Records

2 records

TI-2023-00418 CVE-2023-0441 · GHSA-pwfp-fm3h-8frv

Gallery Blocks with Lightbox < 3.0.8 - Subscriber+ Arbitrary Options Update

HIGH 70

The Gallery Blocks with Lightbox WordPress plugin before 3.0.8 has an AJAX endpoint that can be accessed by any authenticated users, such as subscriber.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00731 Published 2023-03-27 Fixed in 3.0.8

TI-2021-06949 CVE-2021-24667 · GHSA-7x7j-cf43-24q8

Gallery Blocks with Lightbox < 2.2.1- Authenticated Stored Cross-Site Scripting

LOW 25

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox (Version – 2.2.0 & below).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00618 Published 2021-08-30 Fixed in 2.2.1 CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0