Vulnerabilities

TI-2025-16221 CVE-2025-22317 · GHSA-cjxx-684m-35wp

WordPress Gallery Images Ape plugin <= 2.2.8 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gallery Ape Photo Gallery – Image Gallery by Ape gallery-images-ape allows Reflected XSS.This issue affects Photo Gall…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00348 Published 2025-01-15 No fix listed CWE-79

TI-2022-20335 CVE-2022-41995 · GHSA-vmvq-fh49-9m4q

WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Broken Access Control

LOW 20

Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gallery Images Ape: from n/a through 2.2.8.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0033 Published 2025-01-02 No fix listed CWE-862

Vulnerabilities

Filters

WordPress Gallery Images Ape plugin <= 2.2.8 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Broken Access Control