Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe

Güvenlik açıkları

• CVE-2024-30236giriş gerekir≤ 21.3.4

  WordPress Contest Gallery plugin <= 21.3.4 - SQL Injection vulnerability

  Kritik 9.9

• CVE-2026-25035kimlik doğrulamasız≤ 28.1.2.2

  WordPress Contest Gallery plugin <= 28.1.2.2 - Account Takeover vulnerability

  Kritik 9.8

• CVE-2024-11103kimlik doğrulamasız≤ 24.0.7

  Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover

  Kritik 9.8

• CVE-2024-10687kimlik doğrulamasız≤ 24.0.3

  Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated

  Kritik 9.8

• CVE-2026-40771kimlik doğrulamasız≤ 28.1.6

  WordPress Contest Gallery plugin <= 28.1.6 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2026-78088kimlik doğrulamasız≤ 32.0.1

  Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameter

  Yüksek 8.8

• CVE-2024-24887kimlik doğrulamasız · tıklama gerekir≤ 21.2.8.4

  WordPress Contest Gallery Plugin <= 21.2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2019-5974kimlik doğrulamasız · tıklama gerekir

  Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentica

  Yüksek 8.8

• CVE-2024-30238giriş gerekir≤ 21.3.2

  WordPress Photos and Files Contest Gallery plugin <= 21.3.2 - SQL Injection vulnerability

  Yüksek 8.8

• CVE-2026-12165yazar+≤ 30.0.2

  Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter

  Yüksek 8.8

• CVE-2022-36394yazar+≤ 17.0.4

  WordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerability

  Yüksek 8.8

• CVE-2026-57662katılımcı+≤ 30.0.0

  WordPress Contest Gallery plugin <= 30.0.0 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2026-4021kimlik doğrulamasız≤ 28.1.5

  Contest Gallery <= 28.1.5 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion

  Yüksek 8.1

• CVE-2024-32778giriş gerekir≤ 21.3.4

  WordPress Contest Gallery plugin <= 21.3.4 - Arbitrary File Deletion vulnerability

  Yüksek 8.1

• CVE-2026-8912kimlik doğrulamasız≤ 28.1.6

  Contest Gallery <= 28.1.6 - Unauthenticated SQL Injection

  Yüksek 7.5

• CVE-2026-3180kimlik doğrulamasız≤ 28.1.4

  Contest Gallery <= 28.1.4 - Unauthenticated SQL Injection

  Yüksek 7.5

• CVE-2024-43283kimlik doğrulamasız≤ 23.1.2

  WordPress Contest Gallery plugin <= 23.1.2 - Unauthenticated Comment UserID And IP address Disclosure vulnerability

  Yüksek 7.5

• CVE-2025-7725kimlik doğrulamasız≤ 26.1.0

  Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI <= 26.1.0

  Yüksek 7.2

• CVE-2025-22693yüksek yetki≤ 25.1.0

  WordPress Contest Gallery plugin <= 25.1.0 - SQL Injection vulnerability

  Yüksek 7.2

• CVE-2026-61986kimlik doğrulamasız · tıklama gerekir≤ 30.0.5

  WordPress Contest Gallery plugin <= 30.0.5 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-65447kimlik doğrulamasız · tıklama gerekir≤ 30.0.6

  WordPress Contest Gallery plugin <= 30.0.6 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-48291kimlik doğrulamasız · tıklama gerekir≤ 26.0.6

  WordPress Contest Gallery <= 26.0.6 - Cross Site Scripting (XSS) Vulnerability

  Yüksek 7.1

• CVE-2026-42660abone+≤ 28.1.7

  WordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerability

  Orta 6.5

• CVE-2026-42656abone+≤ 28.1.6

  WordPress Contest Gallery plugin <= 28.1.6 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-16586yazar+≤ 30.0.7

  Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRea

  Orta 6.5

• CVE-2026-24964giriş gerekir≤ 28.1.2.1

  WordPress Contest Gallery plugin <= 28.1.2.1 - Server Side Request Forgery (SSRF) vulnerability

  Orta 6.4

• CVE-2025-10383yazar+≤ 27.0.2

  Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2025-6716yazar+≤ 26.0.8

  Contest Gallery <= 26.0.8 - Authenticated (Author+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2025-1513kimlik doğrulamasız≤ 26.0.0.1

  Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 26.0.0.1 - Unauthenticate

  Orta 6.1

• CVE-2024-39631kimlik doğrulamasız · tıklama gerekir≤ 23.1.2

  WordPress Contest Gallery plugin <= 23.1.2 - Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2024-30428kimlik doğrulamasız · tıklama gerekir≤ 24.0.3

  WordPress Contest Gallery plugin <= 24.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2023-28784kimlik doğrulamasız · tıklama gerekir≤ 21.1.2

  WordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2022-45848kimlik doğrulamasız · tıklama gerekir≤ 13.1.0.9

  WordPress Contest Gallery Plugin <= 13.1.0.9 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2025-3862katılımcı+≤ 26.0.6

  Contest Gallery <= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

  Orta 5.4

• CVE-2026-42657kimlik doğrulamasız≤ 28.1.7

  WordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerability

  Orta 5.3

• CVE-2025-12849kimlik doğrulamasız≤ 28.0.2

  Contest Gallery <= 28.0.2 - Missing Authorization

  Orta 5.3

• CVE-2022-27853yazar+≤ 13.1.0.9

  WordPress Contest Gallery plugin <= 13.1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2024-56237yüksek yetki≤ 24.0.3

  WordPress Contest Gallery plugin <= 24.0.3 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2025-62950kimlik doğrulamasız · tıklama gerekir≤ 28.0.0

  WordPress Contest Gallery plugin <= 28.0.0 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 4.3

• CVE-2025-11254kimlik doğrulamasız · tıklama gerekir≤ 27.0.3

  Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injection

  Orta 4.3

• CVE-2026-24965giriş gerekir≤ 28.1.1

  WordPress Contest Gallery plugin <= 28.1.1 - Broken Access Control vulnerability

  Orta 4.3