Photo Gallery by 10Web – Mobile-Friendly Image Gallery

Güvenlik açıkları

• CVE-2022-1281kimlik doğrulamasız→ 1.6.3*

  Photo Gallery < 1.6.3 - Unauthenticated SQL Injection

  Kritik 9.8

• CVE-2022-0169kimlik doğrulamasız→ 1.6.0

  Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection

  Kritik 9.8

• CVE-2019-16119kimlik doğrulamasız

  SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries

  Kritik 9.8

• CVE-2019-14313kimlik doğrulamasız

  A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress.

  Kritik 9.8

• CVE-2015-9380kimlik doğrulamasız · tıklama gerekir

  The photo-gallery plugin before 1.2.42 for WordPress has CSRF.

  Yüksek 8.8

• CVE-2026-102377katılımcı+≤ 1.8.46

  WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability

  Yüksek 8.8

• CVE-2024-5481katılımcı+≤ 1.8.23

  Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function

  Yüksek 8.8

• CVE-2026-49771yüksek yetki≤ 1.8.41

  WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2024-0221yüksek yetki≤ 1.8.19

  Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename

  Yüksek 7.2

• CVE-2017-12977yüksek yetki

  The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related

  Yüksek 7.2

• CVE-2015-1393giriş gerekir

  SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote authenticated users to execute arbitrary S

  Orta 6.5

• CVE-2026-85652yazar+≤ 1.8.44

  Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute

  Orta 6.5

• CVE-2026-9829katılımcı+≤ 1.8.41

  Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter

  Orta 6.5

• CVE-2026-7048katılımcı+≤ 1.8.40

  Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute

  Orta 6.5

• CVE-2026-92974kimlik doğrulamasız · tıklama gerekir≤ 1.8.46

  Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter

  Orta 6.1

• CVE-2025-2269kimlik doğrulamasız · tıklama gerekir≤ 1.8.34

  Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter

  Orta 6.1

• CVE-2024-32583kimlik doğrulamasız · tıklama gerekir≤ 1.8.21

  WordPress Photo Gallery by 10Web plugin <= 1.8.21 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2024-29832kimlik doğrulamasız · tıklama gerekir≤ 1.8.21

  WordPress Photo Gallery Plugin <= 1.8.21 Unauthenticated Reflected Cross Site Scripting in GalleryBox current_url

  Orta 6.1

• CVE-2022-1282kimlik doğrulamasız · tıklama gerekir→ 1.6.3

  Photo Gallery < 1.6.3 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2019-16118kimlik doğrulamasız · tıklama gerekir

  Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/controllers/Option

  Orta 6.1

• CVE-2019-16117kimlik doğrulamasız · tıklama gerekir

  Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/models/Galleries.p

  Orta 6.1

• CVE-2026-27360yüksek yetki≤ 1.8.38

  WordPress Photo Gallery by 10Web plugin <= 1.8.38 - Cross Site Scripting (XSS) vulnerability

  Orta 5.9

• CVE-2024-29833kimlik doğrulamasız · tıklama gerekir≤ 1.8.21

  WordPress Photo Gallery Plugin <= 1.8.21 Stored Cross Site Scripting in UploadHandler

  Orta 5.4

• CVE-2024-29810giriş gerekir≤ 1.8.21

  WordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg thumb_url

  Orta 5.4

• CVE-2024-29809giriş gerekir≤ 1.8.21

  WordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg image_url

  Orta 5.4

• CVE-2024-29808giriş gerekir≤ 1.8.21

  WordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg image_id

  Orta 5.4

• CVE-2015-1394giriş gerekir

  Multiple cross-site scripting (XSS) vulnerabilities in the Photo Gallery plugin before 1.2.11 for WordPress allow remote authenticated users

  Orta 5.4

• CVE-2019-14797giriş gerekir

  The 10Web Photo Gallery plugin before 1.5.23 for WordPress has authenticated stored XSS.

  Orta 5.4

• CVE-2024-5426katılımcı+≤ 1.8.23

  Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG

  Orta 5.4

• CVE-2026-1036kimlik doğrulamasız≤ 1.8.36

  Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion

  Orta 5.3

• CVE-2024-33586kimlik doğrulamasız≤ 1.8.20

  WordPress Photo Gallery by 10Web plugin <= 1.8.20 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2019-14798yüksek yetki

  The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/ad

  Orta 4.9

• CVE-2024-9878yönetici≤ 1.8.30

  Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 4.8

• CVE-2024-44043yüksek yetki≤ 1.8.27

  WordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2024-2296yönetici≤ 1.8.21

  Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG

  Orta 4.8

• CVE-2023-6924yönetici≤ 1.8.18

  Photo Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget

  Orta 4.8

• CVE-2020-9335yönetici

  Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress.

  Orta 4.8

• CVE-2026-32330kimlik doğrulamasız · tıklama gerekir≤ 1.8.37

  WordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 4.3

• CVE-2023-33995giriş gerekir≤ 1.8.15

  WordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2024-35628giriş gerekir≤ 1.8.25

  WordPress Photo Gallery by 10Web plugin <= 1.8.25 - Broken Access Control vulnerability

  Orta 4.3