Vulnerabilities

TI-2025-17396 CVE-2025-23629 · GHSA-p6w3-w72w-2g32

WordPress Gallerio plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Subhasis Laha Gallerio gallerio allows Reflected XSS.This issue affects Gallerio: from n/a through <= 1.0.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-01-23 No fix listed CWE-79

TI-2024-35071 CVE-2024-52400 · GHSA-3hm8-gfcv-xw4r

WordPress Gallerio plugin <= 1.01 - Arbitrary File Upload vulnerability

MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in Subhasis Laha Gallerio gallerio allows Upload a Web Shell to a Web Server.This issue affects Gallerio: from n/a through <= 1.01.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00492 Published 2024-11-16 No fix listed CWE-434

Vulnerabilities

Filters

WordPress Gallerio plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Gallerio plugin <= 1.01 - Arbitrary File Upload vulnerability