Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 108
Reset filtersPhoto Gallery by Ays <= 5.2.6 - Cross-Site Request Forgery
ACF Photo Gallery Field <= 1.9 - Authenticated (Subscriber+) Arbitrary Usermeta Update
Photo Gallery <= 1.8.15 - Missing Authorization
Photo Gallery by Ays <= 5.1.6 - Reflected Cross-Site Scripting
Photo Gallery by Ays <= 5.1.3 - Reflected Cross-Site Scripting via ays_gpg_settings_tab
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.13 - Reflected Cross-Site Scripting
Photo Gallery by 10Web <= 1.8.14 - Authenticated (Administrator+) Directory Traversal
Simple Photo Gallery <= 1.8.1 - Authenticated (Admin+) SQL Injection
Photo Gallery <= 1.8.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.7 - Open Redirect
Photo Gallery by 10Web <= 1.8.0 - Reflected Cross-Site Scripting
Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting
Photo Gallery by 10Web <= 1.6.8 - Authenticated (Admin+) Cross-Site Scripting
Photo Gallery by 10Web <= 1.6.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Photo Gallery by 10Web <= 1.6.6 - Reflected Cross-Site Scripting
Photo Gallery by 10Web <= 1.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Photo Gallery by 10Web <= 1.6.2 - Cross-Site Scripting
Photo Gallery by 10Web <= 1.6.2 - SQL Injection
Photo Gallery by 10Web <= 1.5.87 - Unauthenticated SQL Injection via bwg_tag_id_bwg_thumbnails_0 Parameter
ACF Photo Gallery Field <= 1.7.4 - Reflected Cross-Site Scripting
Photo Gallery by 10Web <= 1.5.78 - Stored Cross-Site Scripting via Uploaded SVG
Photo Gallery <= 1.5.74 - Stored Cross-Site Scripting via Uploaded SVG
Photo Gallery <= 1.5.74 - File Upload Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.