Vulnerabilities

TI-2026-78801 CVE-2026-111837 · GHSA-gwfv-3fg6-68gx

Stored cross-site scripting in WordPress Contest Gallery plugin

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0018 Published 2026-10-21 No fix listed CWE-79

TI-2026-44358 CVE-2026-61986 · GHSA-jqch-cc6f-3333

WordPress Contest Gallery plugin <= 30.0.5 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-19 No fix listed CWE-79

TI-2026-41487 CVE-2026-57662 · GHSA-25p9-h7xj-6xhv

WordPress Contest Gallery plugin <= 30.0.0 - SQL Injection vulnerability

LOW 37

Contributor SQL Injection in Contest Gallery <= 30.0.0 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-06-26 No fix listed CWE-89

TI-2026-30919 CVE-2026-42660 · GHSA-vcff-hh69-qfjw

WordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerability

LOW 29

Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00345 Published 2026-06-15 No fix listed CWE-497

TI-2026-30916 CVE-2026-42657 · GHSA-pvw3-j77v-26w9

WordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerability

LOW 34

Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00219 Published 2026-06-15 No fix listed CWE-1284

TI-2026-30915 CVE-2026-42656 · GHSA-x3gw-fxqf-c5pw

WordPress Contest Gallery plugin <= 28.1.6 - Cross Site Scripting (XSS) vulnerability

LOW 28

Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00205 Published 2026-06-15 No fix listed CWE-79

TI-2026-29440 CVE-2026-40771 · GHSA-w97c-mw8g-gjf8

WordPress Contest Gallery plugin <= 28.1.6 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00283 Published 2026-06-15 No fix listed CWE-89