Vulnerabilities

TI-2025-04566 CVE-2025-5092 · GHSA-hvm5-wg42-9f5q

Cross-site scripting in lightgalleryteam LightGallery WP

LOW 28

Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00256 Published 2025-11-20 No fix listed CWE-79

TI-2025-37503 CVE-2025-60137 · GHSA-88mq-58hg-m76p

WordPress Post Featured Video Plugin <= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Post Featured Video post-featured-video allows Cross Site Request Forgery.This issue affects Post Featured Video: from n/a through <= 1.7.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-09-26 No fix listed CWE-352

TI-2025-23281 CVE-2025-32183 · GHSA-53fr-m6m9-h6fv

WordPress Video Playlist For YouTube plugin <= 6.7.1 - Cross Site Scripting (XSS) vulnerability

MEDIUM 62

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Galaxy Weblinks Video Playlist For YouTube video-playlist-for-youtube allows Stored XSS.This issue affects Video Playl…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00407 Published 2025-04-04 No fix listed CWE-79

TI-2025-23009 CVE-2025-31872 · GHSA-hcm9-4hpj-8jv9

WordPress WP Clone any post type Plugin <= 3.6 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clone any post type: from…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00377 Published 2025-04-01 No fix listed CWE-862

TI-2025-23008 CVE-2025-31871 · GHSA-mq5x-p6pm-hm5x

WordPress WP Clone any post type Plugin <= 3.6 - Open Redirect vulnerability

LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Phishing.This issue affects WP Clone any post type: from n/a through <= 3.6.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00364 Published 2025-04-01 No fix listed CWE-601

TI-2023-24454 CVE-2023-45653 · GHSA-6j74-3j28-p2f4

WordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Galaxy Weblinks Video Playlist For YouTube plugin <= 6.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2023-10-16 No fix listed CWE-352

TI-2022-20680 CVE-2022-42485 · GHSA-77v8-h5vq-j24g

WordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)

LOW 25

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin <= 6.0 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00383 Published 2023-03-21 No fix listed CWE-79