Vulnerabilities > Wpdevart > Gallery > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-07-06 CVE-2024-37542 Missing Authorization vulnerability in Wpdevart Gallery
Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.
network
low complexity
wpdevart CWE-862
6.3
2023-10-18 CVE-2023-45630 Cross-site Scripting vulnerability in Wpdevart Gallery
Unauth.
network
low complexity
wpdevart CWE-79
6.1
2022-07-04 CVE-2022-1946 Cross-site Scripting vulnerability in Wpdevart Gallery
The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting issue
network
wpdevart CWE-79
4.3