TI-2026-29440 CVE-2026-40771 · GHSA-w97c-mw8g-gjf8
WordPress Contest Gallery plugin <= 28.1.6 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions.
Wasiliy Strecker
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Wasiliy Strecker records in CISA KEVNo Wasiliy Strecker vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2026-41487 CVE-2026-57662 · GHSA-25p9-h7xj-6xhv
WordPress Contest Gallery plugin <= 30.0.0 - SQL Injection vulnerability
Priority LOW 37
Contributor SQL Injection in Contest Gallery <= 30.0.0 versions.
TI-2026-30916 CVE-2026-42657 · GHSA-pvw3-j77v-26w9
WordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerability
Priority LOW 34
Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.
TI-2026-44358 CVE-2026-61986 · GHSA-jqch-cc6f-3333
WordPress Contest Gallery plugin <= 30.0.5 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.
TI-2026-30919 CVE-2026-42660 · GHSA-vcff-hh69-qfjw
WordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerability
Priority LOW 29
Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions.
TI-2026-78801 CVE-2026-111837 · GHSA-gwfv-3fg6-68gx
Stored cross-site scripting in WordPress Contest Gallery plugin
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a throug…
TI-2026-30915 CVE-2026-42656 · GHSA-x3gw-fxqf-c5pw
WordPress Contest Gallery plugin <= 28.1.6 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.