Vulnerabilities

TI-2024-03636 CVE-2024-3896 · GHSA-q4gm-hf4c-83hx

Cross-site scripting in robosoft Robo Gallery – Photo & Image Slider

LOW 28

The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the Gallery title field in all versions up to, and including, 3.2.19 due to insufficient in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-07-24 No fix listed CWE-79

TI-2024-14882 CVE-2024-22295 · GHSA-h53r-v36g-3338

WordPress Robo Gallery Plugin <= 3.2.17 is vulnerable to Cross Site Scripting (XSS)

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery allows Stored XSS.This issue affects Photo Gallery, Images…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00315 Published 2024-01-31 No fix listed CWE-79

TI-2023-03265 CVE-2023-3499 · GHSA-6593-m9wf-6mf9

Robo Gallery < 3.2.16 - Admin+ Stored XSS

MEDIUM 55

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.16 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site S…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0047 Published 2023-09-04 Fixed in 3.2.16

TI-2019-15252 CVE-2019-25149 · GHSA-5gqj-h9j6-qwf5

Gallery Images Ape <= 2.0.6 - Authenticated Plugin Deactivation

LOW 34

The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and including, 2.0.6.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00607 Published 2023-06-07 Fixed in 2.0.7 CWE-285

TI-2023-12330 CVE-2023-27620 · GHSA-29vv-f3x5-f29x

WordPress Robo Gallery Plugin <= 3.2.12 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-site Scripting (XSS) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.12 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00478 Published 2023-04-07 No fix listed CWE-79

TI-2022-20160 CVE-2022-41785 · GHSA-f44q-mpr6-mggp

WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Cross Site Scripting (XSS)

LOW 25

Auth. (contributor+) Stored Cross-Site Scripting vulnerability in Galleryape Gallery Images Ape plugin <= 2.2.8 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00383 Published 2023-03-21 No fix listed CWE-79

TI-2022-22608 CVE-2022-45804 · GHSA-prwq-63mh-jrg8

WordPress Robo Gallery Plugin <= 3.2.9 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00231 Published 2023-03-01 No fix listed CWE-352