High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-03	CVE-2023-39917	Unspecified vulnerability in Ays-Pro Photo Gallery Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.2.6 versions. network low complexity ays-pro	8.8
2021-08-02	CVE-2021-24462	Unspecified vulnerability in Ays-Pro Photo Gallery The get_gallery_categories() and get_galleries() functions in the Photo Gallery by Ays – Responsive Image Gallery WordPress plugin before 4.4.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard network low complexity ays-pro	8.8