Vulnerabilities

TI-2025-18414 CVE-2025-24697 · GHSA-g246-2588-xpcw

WordPress Image Gallery – Responsive Photo Gallery plugin <= 1.0.5 - Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in Realwebcare Image Gallery – Responsive Photo Gallery awesome-responsive-photo-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Imag…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00449 Published 2025-02-03 No fix listed CWE-862

TI-2024-11507 CVE-2024-12403 · GHSA-m789-jcxp-w468

Image Gallery – Responsive Photo Gallery <= 1.0.5 - Reflected Cross-Site Scripting

LOW 27

The Image Gallery – Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'awsmgallery' parameter in all versions up to, and including, 1.0.5 due to insufficient input sani…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00337 Published 2025-01-15 No fix listed CWE-79

TI-2023-15589 CVE-2023-32293 · GHSA-x68w-43xr-5pj2

WordPress WRC Pricing Tables plugin <= 2.3.7 - Broken Access Control vulnerability

LOW 31

Missing Authorization vulnerability in Realwebcare WRC Pricing Tables allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WRC Pricing Tables: from n/a through 2.3.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00643 Published 2024-12-09 No fix listed CWE-862

TI-2024-04431 CVE-2024-4758 · GHSA-j67h-vvfp-vgmq

Muslim Prayer Time BD <= 2.4 - Settings Reset via CSRF

HIGH 66

The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attackers to make a logged in admin reset them via a CSRF attack

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00264 Published 2024-06-26 No fix listed CWE-352

TI-2023-19897 CVE-2023-38517 · GHSA-4xj6-w9qx-39jj

WordPress WRC Pricing Tables Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)