plugin

Pixel Gallery Vulnerabilities

2 known security issues reported for the Pixel Gallery WordPress plugin. Most recent disclosed Aug 8, 2026.

2 medium

Running Pixel Gallery on your site? Check whether your installed version is affected.

Scan your site free

Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API

medium

The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in various versions due to insufficient output escaping. This makes it possible for attackers who can compromise the Sigmative API server to inject arbitrary web scripts in pages that will execute whenever a u...

CVSS:
5.4
Affected:
up to 2.1.14
Fixed in:
2.1.15
Disclosed:
Aug 8, 2026

Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

medium

The Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via URLs in all widgets in all versions up to, and including, 1.6.7 due to insufficient input sanitization and output escaping...

CVSS:
6.4
Affected:
up to 1.6.7
Fixed in:
1.6.8
Disclosed:
Jul 21, 2025

CVE-2025-7644 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database