plugin
22 known security issues reported for the Gallery Images WordPress plugin. Most recent disclosed Jan 21, 2020.
Running Gallery Images on your site? Check whether your installed version is affected.
Scan your site free[en] An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is huge_it_image_gallery_ajax_callback().
The Image Gallery - Responsive Photo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the requests to edit gallery images in versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrar...
This plugin is prone to a cross site scripting vulnerability. Update the plugin.
The Image Gallery - Responsive Photo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the requests to edit gallery images in versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrar...
The Image Gallery - Responsive Photo Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.9.57. This is due to missing or incorrect nonce validation on the editgallery() function. This makes it possible for unauthenticated attackers to modify image galleries via a...
The Image Gallery - Responsive Photo Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.9.57. This is due to missing or incorrect nonce validation on the editgallery() function. This makes it possible for unauthenticated attackers to modify image galleries via a...
Huge IT Image Gallery plugin is prone to full path disclosure and SQL injection vulnerabilities. Upgrade the plugin.
Multiple vulnerabilities were found in Huge-IT Image Gallery 1.8.9 plugin. 1) It's prone to a SQL injection vulnerability 2) Also, there's a Full Path Disclosure vulnerability. Update Huge-IT Image Gallery plugin to 1.9.0 version.
An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is huge_it_image_gallery_ajax_callback().
The Image Gallery – Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘linkbutton’ parameter in versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...
The Image Gallery – Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘linkbutton’ parameter in versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Upgrade the plugin.
The Image Gallery - Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘order_by’ parameter in versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web sc...
The Image Gallery - Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘order_by’ parameter in versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web sc...
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Update the plugin.
The Image Gallery - Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘thumbtext' parameters in versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts in pag...
The Image Gallery - Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘thumbtext' parameters in versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts in pag...
[en] SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php.
SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin <= 1.0.7 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php.
The gallery-images WordPress plugin was affected by a Stored Cross-Site Scripting (XSS) security vulnerability.
The gallery-images WordPress plugin was affected by a Reflected Cross-Site Scripting (XSS) security vulnerability.
The gallery-images WordPress plugin was affected by an Authenticated Cross-Site Scripting (XSS) security vulnerability.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free