TI-2026-51332 CVE-2026-73184 · GHSA-hcmw-7p27-79vm
WordPress Global Gallery plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
Vulnerabilities
6 records
TI-2026-41516 CVE-2026-57692 · GHSA-vwc9-859w-9p44
WordPress PrivateContent plugin <= 9.9.2 - Privilege Escalation vulnerability
Priority MEDIUM 49
Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation.
TI-2025-32771 CVE-2025-52721 · GHSA-ww9v-85pm-h7w3
WordPress Global Gallery Plugin <= 9.2.3 - Broken Access Control Vulnerability
Priority LOW 35
Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.
TI-2025-30124 CVE-2025-47627 · GHSA-2p69-hm49-c5f7
WordPress PrivateContent - Mail Actions plugin <= 2.3.2 - Local File Inclusion vulnerability
Priority LOW 36
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LCweb PrivateContent - Mail Actions allows PHP Local File Inclusion.
TI-2024-12840 CVE-2024-13814 · GHSA-wfvp-5m8q-8r33
Global Gallery - WordPress Responsive Gallery <= 9.1.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Priority LOW 39
The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5.
TI-2023-00550 CVE-2023-0581 · GHSA-qwmg-638v-xq4f
PrivateContent <= 8.4.3 - Protection Mechanism Bypass
Priority LOW 31
The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3.