Photo gallery

This hub aggregates every CVE we track for Photo gallery, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Photo gallery.

• CVE-2025-47677WordPress Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery plugin <= 2.7.7.25 - Cross Site Scripting (XSS) Vulnerability6.5May 7, 2025
• CVE-2024-35628WordPress Photo Gallery by 10Web plugin <= 1.8.25 - Broken Access Control vulnerability4.3Jun 11, 2024
• CVE-2024-33586WordPress Photo Gallery by 10Web plugin <= 1.8.20 - Broken Access Control vulnerability5.3Apr 29, 2024
• CVE-2021-46889The 10Web Photo Gallery plugin through 1.5.69 for WordPress allows XSS via theme_id for bwg_frontend_data. NOTE: other parameters are covered by CVE-2021-24291, CVE-2021-25041, and CVE-2021-31693.6.1Jun 7, 2023
• CVE-2023-1427Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal4.9Apr 17, 2023
• CVE-2021-31693The 10Web Photo Gallery plugin through 1.5.68 for WordPress allows XSS via album_gallery_id_0, bwg_album_search_0, and type_0 for bwg_frontend_data. NOTE: other parameters are covered by CVE-2021-2...6.1Nov 29, 2022
• CVE-2021-36891WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change5.4Jun 15, 2022
• CVE-2022-1394Photo Gallery < 1.6.4 - Admin+ Stored Cross-Site Scripting4.8Jun 6, 2022
• CVE-2022-1282Photo Gallery < 1.6.3 - Reflected Cross-Site Scripting6.1May 2, 2022
• CVE-2022-1281Photo Gallery < 1.6.3 - Unauthenticated SQL Injection9.8May 2, 2022
• CVE-2022-0169Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection9.8Mar 14, 2022
• BDU:2022-00848Уязвимость плагина Photo Gallery системы управления содержимым сайта WordPress, позволяющая нарушителю осуществлять межсайтовые сценарные атаки9.6Feb 18, 2022
• CVE-2021-25041Photo Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)6.1Dec 6, 2021
• CVE-2021-24363Photo Gallery < 1.5.75 - File Upload Path Traversal4.9Aug 16, 2021
• CVE-2021-24362Photo Gallery < 1.5.75 - Stored Cross-Site Scripting via Uploaded SVG6.1Aug 16, 2021