Medium
CVE-2024-13751
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 108
Reset filters
Medium
CVE-2025-24697
Image Gallery – Responsive Photo Gallery <= 1.0.5 - Missing Authorization
Medium
CVE-2025-23597
Rio Photo Gallery <= 0.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12403
Image Gallery – Responsive Photo Gallery <= 1.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-12237
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.15 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
Medium
CVE-2024-10704
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.30 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9878
Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2019-25218
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-49325
Photo Gallery Builder <= 3.0 - Missing Authorization
Medium
CVE-2024-8670
Photo Gallery by 10Web <= 1.8.28 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-44043
Photo Gallery by 10Web <= 1.8.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-37442
Photo Gallery by Ays <= 5.7.0 - Authenticated (Administrator+) HTML Injection
Medium
CVE-2024-5481
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function
Medium
CVE-2024-5426
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG
High
CVE-2024-1896
Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode
Medium
CVE-2024-33586
Photo Gallery by 10Web <= 1.8.20 - Missing Authorization
Medium
CVE-2024-2296
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-29810
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'thumb_url'
Medium
CVE-2024-29808
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'image_id'
Medium
CVE-2024-29832
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'current_url'
Medium
CVE-2024-29809
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'image_url'
Medium
CVE-2024-29919
Photo Gallery by Ays <= 5.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-23518
ACF Photo Gallery Field <= 2.6 - Missing Authorization in apgf_update_donation
Critical
CVE-2024-0221
Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.