Read the docs

wpdevart

Records58All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

wpdevart records in CISA KEV

No wpdevart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Booking Calendar 8 records HIGH Gallery 7 records LOW Coming Soon And Maintenance Mode 3 records LOW Organization Chart 3 records LOW Countdown And Countup, Woocommerce Sales Timer 2 records MEDIUM Poll, Survey, Questionnaire And Voting System 2 records HIGH Pricing Table Builder 2 records HIGH Responsive Vertical Icon Menu 2 records LOW

Records

7 records in Gallery · all components

TI-2024-23619 CVE-2024-35750 · GHSA-7x6v-c89f-g8jf

WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevart Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00441 Published 2024-06-08 No fix listed CWE-89
TI-2024-20274 CVE-2024-30550 · GHSA-q9f9-jvjh-rmh2

Cross-site scripting in wpdevart Responsive Image Gallery, Gallery Album

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Reflected XSS.This issue affects Responsive Image Gallery, Gal…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00398 Published 2024-03-31 No fix listed CWE-79
TI-2022-01805 CVE-2022-1946 · GHSA-rjrj-j2x7-8hj2

Gallery < 2.0.0 - Reflected Cross-Site Scripting

Priority LOW 31

The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Ref…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01768 Published 2022-07-04 Fixed in 2.0.0 CWE-79
TI-2024-20509 CVE-2024-31120 · GHSA-3q36-645m-456x

WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Stored XSS.This issue affects Responsive Image Gallery, Galler…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00382 Published 2024-03-31 No fix listed CWE-79
TI-2023-24432 CVE-2023-45631 · GHSA-7wvc-68qr-wgqx

WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Image Gallery, Gallery Album:…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00382 Published 2025-01-02 No fix listed CWE-862
Open these records in search →