All products
contest-gallery
WordPress · Plugin70 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 34.0.3 - Authenticated (Author+) Arbitrary File UploadCVE-2026-118041 |
contest-gallery |
WordPress |
High
|
Fix reported |
|
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 34.0.1 - Missing AuthorizationCVE-2026-107447 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 34.0.1 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-111837 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery <= 33.0.0 - Unauthenticated Unauthorized Account ActivationCVE-2026-107120 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery <= 30.0.6 - Unauthenticated Two-Factor Authentication BypassCVE-2026-16055 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' ParameterCVE-2026-78088 |
contest-gallery |
WordPress |
High
|
Fix reported |
|
| Contest Gallery < 21.2.8.1 - Unauthenticated Stored Cross-Site Scripting via headersCVE-2023-5307 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.5 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-61986 |
contest-gallery |
WordPress |
High
|
Fix reported |
|
| Contest Gallery <= 30.0.6 - Missing AuthorizationCVE-2026-16057 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery <= 30.0.6 - Missing AuthorizationCVE-2026-16056 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'CVE-2026-16586 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery <= 30.0.6 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-65447 |
contest-gallery |
WordPress |
High
|
Fix reported |
|
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.0 - Authenticated (Contributor+) SQL InjectionCVE-2026-57662 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' ParameterCVE-2026-12165 |
contest-gallery |
WordPress |
High
|
Fix reported |
|
| Contest Gallery <= 28.1.6 - Unauthenticated SQL InjectionCVE-2026-8912 |
contest-gallery |
WordPress |
High
|
Fix reported |
|
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.7 - Missing AuthorizationCVE-2026-42657 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.7 - Authenticated (Subscriber+) Sensitive Information ExposureCVE-2026-42660 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.6 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-42656 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.6 - Unauthenticated SQL InjectionCVE-2026-40771 |
contest-gallery |
WordPress |
High
|
Fix reported |
|
| Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.2.2 - Missing AuthorizationCVE-2026-25035 |
contest-gallery |
WordPress |
Medium
|
Fix reported |
|
