Vendors / Simplygallery Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Simplygallery records in CISA KEV No Simplygallery vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 2 records in Simply Gallery Blocks With Lightbox · all components
Priority HIGH 70
The Gallery Blocks with Lightbox WordPress plugin before 3.0.8 has an AJAX endpoint that can be accessed by any authenticated users, such as subscriber.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00731 · Published 2023-03-27 · Fixed in 3.0.8
Priority LOW 25
A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox (Version – 2.2.0 & below).
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00618 · Published 2021-08-30 · Fixed in 2.2.1 CWE-79
Open these records in search → All records by CVSS severity
0 1 1 0 0
