Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: webdzier Clear all filters
TI-2024-10651 CVE-2024-11501 · GHSA-6w97-jr3c-q3h4

Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection

Priority MEDIUM 41

The Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via deserialization of untrusted input from wd_gallery_$id parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00623 Published 2024-12-07 No fix listed CWE-502
TI-2024-29580 CVE-2024-43991 · GHSA-57j6-7wr5-vjfv

WordPress Hotel Galaxy theme <= 4.4.24 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in webdzier Hotel Galaxy allows Stored XSS.This issue affects Hotel Galaxy: from n/a through 4.4.24.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00288 Published 2024-09-17 No fix listed CWE-79