Insta Gallery Vulnerabilities

The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagram profile and media da...

CVSS:

5.3

Affected:

up to 4.9.2

Fixed in:

4.9.3

Disclosed:

Oct 24, 2025

CVE-2025-10637 on NVD →

The WP Social Feed Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init_add_account() function in versions up to, and including, 4.3.9. This makes it possible for unauthenticated attackers to connect an account.

CVSS:

5.3

Affected:

up to 4.3.9

Fixed in:

4.4.0

Disclosed:

Aug 1, 2024

CVE-2024-39640 on NVD →

The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.

CVSS:

8.8

Affected:

up to 2.4.8

Fixed in:

2.4.8

Disclosed:

Aug 12, 2019

CVE-2019-15779 on NVD →