Photo Gallery by Ays – Responsive Image Gallery

Уязвимости

• CVE-2016-10921без авторизации

  The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.

  Критич. 9.8

• CVE-2023-39917без авторизации · нужен клик≤ 5.2.6

  WordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2024-29919без авторизации · нужен клик≤ 5.5.2

  WordPress Photo Gallery by Ays Plugin <=5.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-57947нужен вход≤ 6.3.8

  WordPress Photo Gallery by Ays Plugin <= 6.3.8 - Cross Site Scripting (XSS) Vulnerability

  Средний 6.5

• CVE-2023-32107без авторизации · нужен клик≤ 5.1.3

  WordPress Photo Gallery by Ays Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2024-37442высокие права→ 5.7.1

  WordPress Photo Gallery by Ays – Responsive Image Gallery plugin < 5.7.1 - HTML Injection vulnerability

  Средний 5.5

• CVE-2026-76006админ≤ 6.8.2

  Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter

  Средний 4.9

• CVE-2025-11973админ

  简数采集器 <= 2.6.3 - Authenticated (Admin+) Arbitrary File Read

  Средний 4.9

• CVE-2025-13685без авторизации · нужен клик≤ 6.4.8

  Photo Gallery by Ays <= 6.4.8 - Cross-Site Request Forgery to Bulk Actions

  Средний 4.3