Photo Gallery Team vulnerabilities
9 vulnerabilities
Known vulnerabilities in Photo Gallery Team products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Photo Gallery By 10Web4 vulnerabilities
- Photo Gallery By Ays2 vulnerabilities
- Photo Gallery By Ays – Responsive Image Gallery2 vulnerabilities
- Photo Gallery By 10Web – Mobile Friendly Image Gallery1 vulnerabilities
CVE-2021-2429110webphoto_gallery+2
EPSS score14.51%
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.69 was vulnerable to Reflected Cross-Site Scripting (XSS) issues via the gallery_id, tag, album_id and _id GET parameters passed to the bwg_frontend_data AJAX action (available to both unauthenticated and authenticated users)CVE-2024-37442ays-prophoto_gallery+2EPSS score0.35%
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1.CVE-2024-29919photo gallery teamphoto gallery by ays+1EPSS score0.39%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Reflected XSS.This issue affects Photo Gallery by Ays: from n/a through 5.5.2.CVE-2024-3258310webphoto_gallery+1EPSS score0.34%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Reflected XSS.This issue affects Photo Gallery by 10Web: from n/a through 1.8.21.CVE-2024-3562810webphoto_gallery+2EPSS score0.35%
Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25.CVE-2024-3358610webphoto_gallery+2EPSS score0.37%
Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.20.CVE-2023-39917ays-prophoto_gallery+2EPSS score0.26%
Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.2.6 versions.CVE-2023-32107ays-prophoto_gallery+2EPSS score0.40%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.1.3 versions.CVE-2023-3399510webphoto_gallery+2EPSS score0.51%
Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Gallery by 10Web: from n/a through 1.8.15.