Contest Gallery Vulnerabilities

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 30.0.5. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVSS:

7.2

Affected:

up to 30.0.5

Fixed in:

30.0.6

Disclosed:

Aug 19, 2026

CVE-2026-61986 on NVD →

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId' in all versions up to, and including, 30.0.7 due to insufficient escaping on the user suppli...

CVSS:

6.5

Affected:

up to 30.0.7

Fixed in:

31.0.0

Disclosed:

Aug 14, 2026

CVE-2026-16586 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 30.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user acces...

CVSS:

7.2

Affected:

up to 30.0.6

Fixed in:

30.0.7

Disclosed:

Jul 27, 2026

CVE-2026-65447 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 30.0.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 30.0.6

Fixed in:

30.0.7

Disclosed:

Jul 27, 2026

CVE-2026-16056 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 30.0.6. This makes it possible for authenticated attackers, with author-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 30.0.6

Fixed in:

30.0.7

Disclosed:

Jul 23, 2026

CVE-2026-16057 on NVD →

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 30.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for a...

CVSS:

6.5

Affected:

up to 30.0.0

Fixed in:

30.0.1

Disclosed:

Jun 26, 2026

CVE-2026-57662 on NVD →

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 30.0.2 via the `RegistryUserRole` parameter. This is due to the plugin's admin menu being registered at the `edit_posts` capability level — granti...

CVSS:

8.8

Affected:

up to 30.0.2

Fixed in:

30.0.3

Disclosed:

Jun 16, 2026

CVE-2026-12165 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection via the 'form_input' parameter in versions up to, and including, 28.1.6. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query inside the unauthenticated 'post_cg_gallery_fo...

CVSS:

7.5

Affected:

up to 28.1.6

Fixed in:

28.1.7

Disclosed:

May 18, 2026

CVE-2026-8912 on NVD →

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 28.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level ac...

CVSS:

6.4

Affected:

up to 28.1.6

Fixed in:

29.0.0

Disclosed:

Apr 29, 2026

CVE-2026-42656 on NVD →

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 28.1.7. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 28.1.7

Fixed in:

29.0.0

Disclosed:

Apr 29, 2026

CVE-2026-42657 on NVD →

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 28.1.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive user or configu...

CVSS:

4.3

Affected:

up to 28.1.7

Fixed in:

29.0.0

Disclosed:

Apr 29, 2026

CVE-2026-42660 on NVD →

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 28.1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for u...

CVSS:

7.5

Affected:

up to 28.1.6

Fixed in:

28.1.7

Disclosed:

Apr 21, 2026

CVE-2026-40771 on NVD →

Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion vulnerability

CVSS:

8.1

Affected:

up to 28.1.5

Fixed in:

28.1.6

Disclosed:

Mar 24, 2026

The Contest Gallery plugin for WordPress is vulnerable to an authentication bypass leading to admin account takeover in all versions up to, and including, 28.1.5. This is due to the email confirmation handler in `users-registry-check-after-email-or-pin-confirmation.php` using the user's email string in a `WHERE ID = %s...

CVSS:

8.1

Affected:

up to 28.1.5

Fixed in:

28.1.6

Disclosed:

Mar 23, 2026

CVE-2026-4021 on NVD →

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 28.1.2.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 28.1.2.2

Fixed in:

28.1.3

Disclosed:

Mar 23, 2026

CVE-2026-25035 on NVD →

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 28.1.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary loc...

CVSS:

6.4

Affected:

up to 28.1.2.1

Fixed in:

28.1.2.2

Disclosed:

Mar 10, 2026

CVE-2026-24964 on NVD →

Unauthenticated SQL Injection vulnerability

CVSS:

9.3

Affected:

up to 28.1.4

Fixed in:

28.1.5

Disclosed:

Mar 3, 2026

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to blind SQL Injection via the ‘cgLostPasswordEmail’ and the ’cgl_mail’ parameter in all versions up to, and including, 28.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficien...

CVSS:

7.5

Affected:

up to 28.1.4

Fixed in:

28.1.5

Disclosed:

Mar 2, 2026

CVE-2026-3180 on NVD →

[en] Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contest Gallery: from n/a through <= 28.1.1.

Affected:

up to 28.1.1

Fix:

No patched version reported

Disclosed:

Feb 3, 2026

CVE-2026-24965 on NVD →

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 28.1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

CVSS:

4.3

Affected:

up to 28.1.1

Fixed in:

28.1.2

Disclosed:

Jan 9, 2026

CVE-2026-24965 on NVD →

[en] The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.0.2. This is due to the plugin registering the `cg_check_wp_admin_upload_v10` AJAX action for both authenticated and unauthenticated users without implementing capability checks or nonce verifica...

Affected:

up to 28.0.3

Fixed in:

28.0.3

Disclosed:

Nov 15, 2025

CVE-2025-12849 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.0.2. This is due to the plugin registering the `cg_check_wp_admin_upload_v10` AJAX action for both authenticated and unauthenticated users without implementing capability checks or nonce verification....

CVSS:

5.3

Affected:

up to 28.0.2

Fixed in:

28.0.3

Disclosed:

Nov 14, 2025

CVE-2025-12849 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Cross Site Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.0.0.

Affected:

up to 28.0.0

Fix:

No patched version reported

Disclosed:

Nov 6, 2025

CVE-2025-62950 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 28.0.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they can...

CVSS:

4.3

Affected:

up to 28.0.0

Fixed in:

28.0.1

Disclosed:

Oct 12, 2025

CVE-2025-62950 on NVD →

[en] The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 27.0.3 via gallery submissions. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code...

Affected:

up to 28.0.0

Fixed in:

28.0.0

Disclosed:

Oct 11, 2025

CVE-2025-11254 on NVD →

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 27.0.3 via gallery submissions. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execu...

CVSS:

4.3

Affected:

up to 27.0.3

Fixed in:

28.0.0

Disclosed:

Oct 10, 2025

CVE-2025-11254 on NVD →

[en] The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This ma...

Affected:

up to 27.0.3

Fixed in:

27.0.3

Disclosed:

Oct 4, 2025

CVE-2025-10383 on NVD →

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes i...

CVSS:

6.4

Affected:

up to 27.0.2

Fixed in:

27.0.3

Disclosed:

Oct 3, 2025

CVE-2025-10383 on NVD →

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment feature in all versions up to, and including, 26.1.0 due to insufficient input sanit...

CVSS:

7.2

Affected:

up to 26.1.0

Fixed in:

26.1.1

Disclosed:

Jul 31, 2025

CVE-2025-7725 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery allows Stored XSS. This issue affects Contest Gallery: from n/a through 26.0.6.

Affected:

up to 26.0.7

Fixed in:

26.0.7

Disclosed:

Jul 16, 2025

CVE-2025-48291 on NVD →

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 26.0.6 due to insufficient input sanitization and output es...

CVSS:

6.1

Affected:

up to 26.0.6

Fixed in:

26.0.7

Disclosed:

Jul 11, 2025

CVE-2025-48291 on NVD →

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'upload[1][title]' parameter in all versions up to, and including, 26.0.8 due to insufficien...

CVSS:

6.4

Affected:

up to 26.0.8

Fixed in:

26.0.9

Disclosed:

Jul 10, 2025

CVE-2025-6716 on NVD →

Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 26.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitra...

CVSS:

6.4

Affected:

up to 26.0.6

Fixed in:

26.0.7

Disclosed:

May 7, 2025

CVE-2025-3862 on NVD →

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Name and Comment field when commenting on photo gallery entries in all versions up to, and including...

CVSS:

7.2

Affected:

up to 26.0.0.1

Fixed in:

26.0.1

Disclosed:

Feb 27, 2025

CVE-2025-1513 on NVD →

[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contest Gallery Contest Gallery allows SQL Injection. This issue affects Contest Gallery: from n/a through 25.1.0.

Affected:

up to 25.1.2

Fixed in:

25.1.2

Disclosed:

Feb 3, 2025

CVE-2025-22693 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 25.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level access and abo...

CVSS:

6.5

Affected:

up to 25.1.0

Fixed in:

25.1.2

Disclosed:

Jan 31, 2025

CVE-2025-22693 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Contest Gallery Contest Gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through 24.0.3.

Affected:

up to 24.0.4

Fixed in:

24.0.4

Disclosed:

Jan 2, 2025

CVE-2024-56237 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 24.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that...

CVSS:

6.4

Affected:

up to 24.0.3

Fixed in:

24.0.4

Disclosed:

Dec 30, 2024

CVE-2024-56237 on NVD →

[en] The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbi...

Affected:

up to 24.0.8

Fixed in:

24.0.8

Disclosed:

Nov 28, 2024

CVE-2024-11103 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary...

CVSS:

9.8

Affected:

up to 24.0.7

Fixed in:

24.0.8

Disclosed:

Nov 27, 2024

CVE-2024-11103 on NVD →

[en] The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to time-based SQL Injection via the $collectedIds parameter in all versions up to, and including, 24.0.3 due to insufficient escaping on the use...

Affected:

up to 24.0.4

Fixed in:

24.0.4

Disclosed:

Nov 5, 2024

CVE-2024-10687 on NVD →

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to time-based SQL Injection via the $collectedIds parameter in all versions up to, and including, 24.0.3 due to insufficient escaping on the user sup...

CVSS:

9.8

Affected:

up to 24.0.3

Fixed in:

24.0.4

Disclosed:

Nov 4, 2024

CVE-2024-10687 on NVD →

[en] Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 23.1.2.

Affected:

up to 23.1.3

Fixed in:

23.1.3

Disclosed:

Aug 26, 2024

CVE-2024-43283 on NVD →

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 23.1.2. This makes it possible for unauthenticated attackers to extract data...

CVSS:

5.3

Affected:

up to 23.1.2

Fixed in:

23.1.3

Disclosed:

Aug 16, 2024

CVE-2024-43283 on NVD →

[en] Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Contest Gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through 23.1.2.

Affected:

up to 23.1.3

Fixed in:

23.1.3

Disclosed:

Aug 1, 2024

CVE-2024-39631 on NVD →

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 23.1.2 due to insufficient input sanitization and output escaping. This makes it...

CVSS:

6.1

Affected:

up to 23.1.2

Fixed in:

23.1.3

Disclosed:

Jul 24, 2024

CVE-2024-39631 on NVD →

[en] Missing Authorization vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.4.

Affected:

up to 21.3.5

Fixed in:

21.3.5

Disclosed:

Jun 9, 2024

CVE-2024-32778 on NVD →

The Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on a function in all versions up to, and including, 21.3.4. This makes it possible for authenticate...

CVSS:

4.3

Affected:

up to 21.3.4

Fixed in:

21.3.5

Disclosed:

Apr 22, 2024

CVE-2024-32778 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Contest Gallery allows Reflected XSS.This issue affects Contest Gallery: from n/a through 21.3.5.

Affected:

up to 21.3.6

Fixed in:

21.3.6

Disclosed:

Mar 29, 2024

CVE-2024-30428 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 21.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfull...

CVSS:

6.1

Affected:

up to 21.3.5

Fixed in:

21.3.6

Disclosed:

Mar 28, 2024

CVE-2024-30428 on NVD →

[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.4.

Affected:

up to 21.3.5

Fixed in:

21.3.5

Disclosed:

Mar 28, 2024

CVE-2024-30236 on NVD →

[en] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.2.

Affected:

up to 21.3.2.1

Fixed in:

21.3.2.1

Disclosed:

Mar 27, 2024

CVE-2024-30238 on NVD →

The Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 21.3.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

CVSS:

9.9

Affected:

up to 21.3.2

Fixed in:

21.3.2.1

Disclosed:

Mar 26, 2024

CVE-2024-30238 on NVD →

The Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 21.3.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

CVSS:

9.9

Affected:

up to 21.3.4

Fixed in:

21.3.5

Disclosed:

Mar 26, 2024

CVE-2024-30236 on NVD →

[en] The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks.

Affected:

up to 21.3.1

Fixed in:

21.3.1

Disclosed:

Mar 11, 2024

CVE-2024-1487 on NVD →

The Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 21.3.0 due to insufficient input sanitization and output escaping on content descriptions. Th...

CVSS:

6.4

Affected:

up to 21.3.0

Fixed in:

21.3.1

Disclosed:

Feb 14, 2024

CVE-2024-1487 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Contest Gallery Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress.This issue affects Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress: from n/a throu...

Affected:

up to 21.2.9

Fixed in:

21.2.9

Disclosed:

Feb 12, 2024

CVE-2024-24887 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 21.2.8.4. This is due to missing or incorrect nonce validation in the prev10/prev10-admin/gallery/gallery.php file. This makes it possible for unauthenticated attackers to render galleries via a forged...

CVSS:

4.3

Affected:

up to 21.2.8.4

Fixed in:

21.2.9

Disclosed:

Feb 5, 2024

CVE-2024-24887 on NVD →

The Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 21.2.8.4. This is due to missing or incorrect nonce validation in the prev10/prev10-admin/gallery/gallery....

CVSS:

4.7

Affected:

up to 21.2.8.4

Fixed in:

21.2.9

Disclosed:

Jan 9, 2024

The Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 21.2.8.4. This is due to missing or incorrect nonce validation in the prev10/prev10-admin/gallery/gallery....

Affected:

up to 21.2.9

Fixed in:

21.2.9

Disclosed:

Jan 9, 2024

[en] The Photos and Files Contest Gallery WordPress plugin before 21.2.8.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks via certain headers.

Affected:

up to 21.2.8.1

Fixed in:

21.2.8.1

Disclosed:

Oct 31, 2023

CVE-2023-5307 on NVD →

The Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via headers in all versions up to 21.2.8.1 (exclusive) due to insufficient input sanitization and output escaping. This makes it possible for u...

CVSS:

6.1

Affected:

up to 21.2.8.1

Fixed in:

21.2.8.1

Disclosed:

Oct 10, 2023

CVE-2023-5307 on NVD →

[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contest Gallery plugin <= 21.1.2 versions.

Affected:

up to 21.1.2.1

Fixed in:

21.1.2.1

Disclosed:

Jun 22, 2023

CVE-2023-28784 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via an unknown parameter in versions up to, and including, 21.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...

CVSS:

6.1

Affected:

up to 21.1.2

Fixed in:

21.1.2.1

Disclosed:

Mar 27, 2023

CVE-2023-28784 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_Fields POST parameter before concatenating it to an SQL query in users-registry-check-registering-and-login.php. This may allow malicious visitors to leak sensitive information from the s...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4158 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the user_id POST parameter before concatenating it to an SQL query in ajax-functions-backend.php. This may allow malicious users with at least author privilege to leak sensitive information from...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4156 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_option_id POST parameter before concatenating it to an SQL query in export-votes-all.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress configu...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4157 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the wp_user_id GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress config...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4155 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_multiple_files_for_post POST parameter before concatenating it to an SQL query in 0_change-gallery.php. This may allow malicious users with at least author privilege to leak sensitive inf...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4164 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_copy_id POST parameter before concatenating it to an SQL query in cg-copy-comments.php and cg-copy-rating.php. This may allow malicious users with at least author privilege to leak sensi...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4160 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_copy_start POST parameter before concatenating it to an SQL query in copy-gallery-images.php. This may allow malicious users with at least author privilege to leak sensitive information f...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4161 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5, Contest Gallery Pro WordPress plugin before 19.1.5 do not escape the option_id POST parameter before concatenating it to an SQL query in edit-options.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4152 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_order POST parameter before concatenating it to an SQL query in order-custom-fields-with-and-without-search.php. This may allow malicious users with at least author privilege to leak sens...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4165 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_row POST parameter before concatenating it to an SQL query in 3_row-order.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4162 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_id POST parameter before concatenating it to an SQL query in 0_change-gallery.php. This may allow malicious users with at least author privilege to leak sensitive information from the sit...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4159 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the upload[] POST parameter before concatenating it to an SQL query in get-data-create-upload-v10.php. This may allow malicious users with at least author privilege to leak sensitive information...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4153 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4_activate.php. This may allow malicious users with at least author privilege to leak sensitive information from the site'...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4166 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id GET parameter before concatenating it to an SQL query in export-images-data.php. This may allow malicious users with at least author privilege to leak sensitive information from th...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4151 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_deactivate and cg_activate POST parameters before concatenating it to an SQL query in 2_deactivate.php and 4_activate.php, respectively. This may allow malicious users with at least auth...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4163 on NVD →

[en] The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id POST parameter before concatenating it to an SQL query in order-custom-fields-with-and-without-search.php. This may allow malicious users with at least author privilege to leak sen...

Affected:

up to 19.1.5.1

Fixed in:

19.1.5.1

Disclosed:

Dec 26, 2022

CVE-2022-4150 on NVD →

[en] Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Contest Gallery plugin <= 13.1.0.9 on WordPress.

Affected:

up to 19.1.5

Fixed in:

19.1.5

Disclosed:

Dec 6, 2022

CVE-2022-45848 on NVD →

The Contest Gallery (Pro) plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.5 due to insufficient escaping on the user supplied option_id parameter and lack of sufficient preparation on the existing SQL query in the order-custom-fields-with-and-without-search.php file. This make...

CVSS:

8.8

Affected:

up to 19.1.5

Fixed in:

19.1.5.1

Disclosed:

Dec 5, 2022

CVE-2022-4150 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied cg_Fields parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional...

CVSS:

8.1

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Dec 5, 2022

CVE-2022-4158 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.5 due to insufficient escaping on the user supplied user_id parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL...

CVSS:

8.1

Affected:

up to 19.1.5

Fixed in:

19.1.5.1

Disclosed:

Dec 5, 2022

CVE-2022-4156 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied cg_option_id parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Dec 5, 2022

CVE-2022-4157 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied wp_user_id parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level pr...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Dec 5, 2022

CVE-2022-4155 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied cg_multiple_files_for_post parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Dec 5, 2022

CVE-2022-4164 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied cg_copy_id parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level p...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Dec 5, 2022

CVE-2022-4160 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied cg_copy_start parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Dec 5, 2022

CVE-2022-4161 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied option_id GET parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Dec 5, 2022

CVE-2022-4152 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied cg_order parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level priv...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Dec 5, 2022

CVE-2022-4165 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied cg_row parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level privil...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Dec 5, 2022

CVE-2022-4162 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.5 due to insufficient escaping on the user supplied cg_id parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level privilege...

CVSS:

7.5

Affected:

up to 19.1.5

Fixed in:

19.1.5.1

Disclosed:

Dec 5, 2022

CVE-2022-4159 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.5 due to insufficient escaping on the user supplied upload[] parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level privil...

CVSS:

7.5

Affected:

up to 19.1.5

Fixed in:

19.1.5.1

Disclosed:

Dec 5, 2022

CVE-2022-4153 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied addCountS parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level pri...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Dec 5, 2022

CVE-2022-4166 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied option_id parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level pri...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Nov 29, 2022

CVE-2022-4151 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.1.4.1 due to insufficient escaping on the user supplied cg_activate and cg_deactivate parameters and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...

CVSS:

7.5

Affected:

up to 19.1.4.1

Fixed in:

19.1.5

Disclosed:

Nov 29, 2022

CVE-2022-4163 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 13.1.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successf...

CVSS:

6.1

Affected:

up to 13.1.0.9

Fixed in:

14.0.0

Disclosed:

Nov 23, 2022

CVE-2022-45848 on NVD →

[en] Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin <= 17.0.4 at WordPress.

Affected:

up to 17.0.5

Fixed in:

17.0.5

Disclosed:

Aug 23, 2022

CVE-2022-36394 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 17.0.4 due to insufficient escaping on the user supplied $id parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL qu...

CVSS:

8.8

Affected:

up to 17.0.4

Fixed in:

17.0.5

Disclosed:

Aug 9, 2022

CVE-2022-36394 on NVD →

The Contest Gallery – Files Upload and Contest Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the ID variable supplied via the post_contest_gallery_action_ajax AJAX action. This can only be exploited by administrative-level users and above to extract sensitive information from the database...

CVSS:

7.2

Affected:

up to 17.0.4

Fixed in:

17.0.5

Disclosed:

Jun 1, 2022

The Contest Gallery – Files Upload and Contest Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the ID variable supplied via the post_contest_gallery_action_ajax AJAX action. This can only be exploited by administrative-level users and above to extract sensitive information from the database...

Affected:

up to 17.0.5

Fixed in:

17.0.5

Disclosed:

Jun 1, 2022

[en] Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) in Contest Gallery (WordPress plugin) <= 13.1.0.9

Affected:

up to 14.0.0

Fixed in:

14.0.0

Disclosed:

Apr 18, 2022

CVE-2022-27853 on NVD →

The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the...

CVSS:

9.8

Affected:

up to 13.1.0.5

Fixed in:

13.1.0.6

Disclosed:

Apr 13, 2022

CVE-2021-24915 on NVD →

Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) in Contest Gallery (WordPress plugin) <= 13.1.0.9

CVSS:

6.4

Affected:

up to 13.1.0.9

Fixed in:

14.0.0

Disclosed:

Dec 20, 2021

CVE-2022-27853 on NVD →

[en] The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get...

Affected:

up to 13.1.0.6

Fixed in:

13.1.0.6

Disclosed:

Nov 29, 2021

CVE-2021-24915 on NVD →

The Contest Gallery plugin for WordPress is vulnerable to Sensitive Data Exposure in versions before 13.1.0.7 via the cg_remove_not_required_coded_csvs function due to insufficient capability checks. This makes it possible for authenticated attackers with subscriber-level privileges and above to extract sensitive data...

CVSS:

4.3

Affected:

up to 13.1.0.7

Fixed in:

13.1.0.7

Disclosed:

Nov 1, 2021

Email Address Disclosure vulnerability discovered by WPScanTeam in WordPress Contest Gallery plugin (versions <= 13.1.0.6).

Affected:

up to 13.1.0.7

Fixed in:

13.1.0.7

Disclosed:

Nov 1, 2021

The Contest Gallery plugin for WordPress is vulnerable to Sensitive Data Exposure in versions before 13.1.0.7 via the cg_remove_not_required_coded_csvs function due to insufficient capability checks. This makes it possible for authenticated attackers with subscriber-level privileges and above to extract sensitive data...

Affected:

up to 13.1.0.7

Fixed in:

13.1.0.7

Disclosed:

Nov 1, 2021

[en] Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected:

up to 10.4.5

Fixed in:

10.4.5

Disclosed:

Jul 5, 2019

CVE-2019-5974 on NVD →

Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS:

8.8

Affected:

up to 10.4.4

Fixed in:

10.4.5

Disclosed:

Jun 12, 2019

CVE-2019-5974 on NVD →

The plugin does not have any proper access controls when exporting users from a gallery, which could allow any authenticated users (such as subscriber) to list all users from the blog, disclosing their username and email address

Affected:

up to 13.1.0.7

Fixed in:

13.1.0.7

Affected:

up to 26.0.1

Fixed in:

26.0.1

CVE-2025-1513 on NVD →

Affected:

up to 26.0.7

Fixed in:

26.0.7

CVE-2025-3862 on NVD →

Affected:

up to 26.0.9

Fixed in:

26.0.9

CVE-2025-6716 on NVD →

Affected:

up to 26.1.1

Fixed in:

26.1.1

CVE-2025-7725 on NVD →