Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Sensitive Information Disclosure Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Xss - Known Vulnerabilities Vulnerability Name CVE CWE CWE Severity WordPress Plugin Gallery-Flagallery Photo Portfolio Cross-Site Scripting (2.70) CVE-2013-3261 CWE-79 CWE-79 High WordPress Plugin Gallery-Flagallery Photo Portfolio Information Disclosure (4.24) CVE-2014-8491 CWE-200 CWE-200 High WordPress Plugin Gallery-Flagallery Photo Portfolio Multiple Vulnerabilities (2.00) CWE-22 CWE-89 CWE-94 CWE-22 CWE-89 CWE-94 High WordPress Plugin Gallery-Flagallery Photo Portfolio SQL Injection (2.55) CWE-89 CWE-89 High WordPress Plugin Gallery-Flagallery Photo Portfolio SQL Injection and Information Disclosure Vulnerabilities (0.59) CWE-22 CWE-89 CWE-22 CWE-89 High WordPress Plugin Gallery-Image and Video Gallery with Thumbnails SQL Injection (1.2.0) CVE-2017-14125 CWE-89 CWE-89 High WordPress Plugin Gallery-Image and Video Gallery with Thumbnails SQL Injection (2.0.3) CVE-2024-35750 CWE-89 CWE-89 High WordPress Plugin Gallery-Photo Albums-Portfolio Cross-Site Scripting (1.2.25) CWE-79 CWE-79 High WordPress Plugin Gallery-Photo Albums-Portfolio Cross-Site Scripting (1.3.47) CVE-2015-7386 CWE-79 CWE-79 High WordPress Plugin Gallery-Photo Albums-Portfolio Multiple Cross-Site Request Forgery Vulnerabilities (1.2.59) CWE-352 CWE-352 High WordPress Plugin Gallery-Photo Albums-Portfolio Multiple Cross-Site Scripting Vulnerabilities (1.2.29) CWE-79 CWE-79 High WordPress Plugin Gallery-Responsive Photo and Video Gallery by Limb Cross-Site Scripting (1.3.2) CVE-2019-14790 CWE-79 CWE-79 High WordPress Plugin Gallery-Video Gallery and Youtube Gallery Cross-Site Scripting (1.2.4) CWE-79 CWE-79 High WordPress Plugin Gallery-Video Gallery and Youtube Gallery Cross-Site Scripting (1.7.01) CWE-79 CWE-79 High WordPress Plugin Gallery-Video Gallery and Youtube Gallery Multiple Vulnerabilities (2.0.3) CWE-79 CWE-352 CWE-79 CWE-352 High WordPress Plugin Gallery-Video Gallery and Youtube Gallery SQL Injection (2.0.9) CWE-89 CWE-89 High WordPress Plugin Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery Cross-Site Scripting (2.2.0) CVE-2021-24667 CWE-79 CWE-79 High WordPress Plugin Gallery by BestWebSoft 'php.php' Arbitrary File Upload (3.06) CWE-434 CWE-434 High WordPress Plugin Gallery by BestWebSoft Arbitrary File Disclosure (3.8.3) CWE-538 CWE-538 High WordPress Plugin Gallery by BestWebSoft Cross-Site Scripting (4.2.1) CWE-79 CWE-79 High WordPress Plugin Gallery by BestWebSoft Cross-Site Scripting (4.4.9) CVE-2017-2171 CWE-79 CWE-79 High WordPress Plugin Gallery Categories by BestWebSoft Cross-Site Scripting (1.0.8) CVE-2017-2171 CWE-79 CWE-79 High WordPress Plugin Gallery for Social Photo Cross-Site Request Forgery (1.0.0.27) CVE-2022-2224 CWE-352 CWE-352 High WordPress Plugin Gallery for Social Photo Unspecified Vulnerability (1.0.0.25) High WordPress Plugin Gallery from files Multiple Vulnerabilities (1.60) CVE-2021-24349 CWE-79 CWE-94 CWE-79 CWE-94 High WordPress Plugin Gallery Master-Responsive Photo Galleries & Albums Cross-Site Scripting (1.0.22) CWE-79 CWE-79 High WordPress Plugin Gallery Objects SQL Injection (0.4) CVE-2014-5201 CWE-89 CWE-89 High WordPress Plugin Gallery PhotoBlocks Cross-Site Scripting (1.1.40) CWE-79 CWE-79 High WordPress Plugin Gallery PhotoBlocks Cross-Site Scripting (1.1.42) CVE-2019-15829 CWE-79 CWE-79 High WordPress Plugin Gallery PhotoBlocks Cross-Site Scripting (1.1.50) CWE-79 CWE-79 High WordPress Plugin Gallery PhotoBlocks Unspecified Vulnerability (1.1.32) High WordPress Plugin Gallery Plugin for WordPress-Envira Photo Gallery Cross-Site Scripting (1.7.6) CVE-2020-9334 CWE-79 CWE-79 High WordPress Plugin Gallery Plugin for WordPress-Envira Photo Gallery Cross-Site Scripting (1.8.3.2) CVE-2021-24126 CWE-79 CWE-79 High WordPress Plugin Gallery transformation SQL Injection (1.0) CVE-2017-1002028 CWE-89 CWE-89 High WordPress Plugin GamePress-The Game Database Cross-Site Scripting (1.1.0) CVE-2021-24617 CWE-79 CWE-79 High WordPress Plugin Game Server Status Multiple Vulnerabilities (1.0) CVE-2021-24662 CWE-79 CWE-89 CWE-79 CWE-89 High WordPress Plugin Game tabs Cross-Site Scripting (0.4.0) CVE-2014-4531 CWE-79 CWE-79 High WordPress Plugin GamiPress-The most flexible and powerful gamification for WordPress Cross-Site Request Forgery (2.5.0) CWE-352 CWE-352 High WordPress Plugin GamiPress-The most flexible and powerful gamification for WordPress Multiple Vulnerabilities (2.5.6) CVE-2023-25697 CVE-2023-25715 CWE-352 CWE-862 CWE-352 CWE-862 High WordPress Plugin GamiPress-The most flexible and powerful gamification for WordPress SQL Injection (2.5.7) CVE-2023-24000 CWE-89 CWE-89 High WordPress Plugin Gantry 4 Framework Cross-Site Scripting (4.1.5) CWE-79 CWE-79 High WordPress Plugin Gantry 4 Framework Remote Command Execution (4.1.3) CWE-95 CWE-95 High WordPress Plugin Gantry 5 Framework Cross-Site Scripting (5.4.8) CWE-79 CWE-79 High WordPress Plugin GarageSale Cross-Site Scripting (1.2.2) CVE-2014-4532 CWE-79 CWE-79 High WordPress Plugin Garee's Flickr Feed Multiple Cross-Site Scripting Vulnerabilities (0.8) CWE-79 CWE-79 High WordPress Plugin GA Top post for WP by Asentechllc Security Bypass (1.0) CWE-264 CWE-264 High WordPress Plugin GA Universal Cross-Site Request Forgery (1.0) CWE-352 CWE-352 High WordPress Plugin G Auto-Hyperlink SQL Injection (1.0.1) CVE-2021-24627 CWE-89 CWE-89 High WordPress Plugin GB Gallery Slideshow SQL Injection (1.2) CVE-2014-8375 CWE-89 CWE-89 High WordPress Plugin gboutique Local File Inclusion (1.3) CVE-2014-2383 CWE-22 CWE-22 High WordPress Plugin GB Team Stats Cross-Site Scripting (1.5.1) CWE-79 CWE-79 High WordPress Plugin GD bbPress Attachments Cross-Site Scripting (2.5) CWE-79 CWE-79 High WordPress Plugin GD bbPress Attachments Multiple Vulnerabilities (2.2) CVE-2015-5481 CWE-22 CWE-79 CWE-22 CWE-79 High WordPress Plugin GD bbPress Tools Cross-Site Scripting (1.7) CWE-79 CWE-79 High WordPress Plugin GdeSlon Affiliate Shop Open Redirect (2.0) CWE-601 CWE-601 High WordPress Plugin GD Mail Queue Cross-Site Scripting (3.9.3) CVE-2023-3122 CWE-79 CWE-79 High WordPress Plugin GDPR CCPA Compliance Support PHP Object Injection (2.3) CWE-915 CWE-915 High WordPress Plugin GDPR Cookie Compliance Security Bypass (4.0.2) CWE-264 CWE-264 High WordPress Plugin GDPR Cookie Consent Security Bypass (1.8.2) CVE-2020-20633 CWE-264 CWE-264 High WordPress Plugin GD Rating System Cross-Site Scripting (2.0.2) CVE-2017-18591 CWE-79 CWE-79 High WordPress Plugin GD Rating System Multiple Vulnerabilities (2.3) CVE-2018-5286 CVE-2018-5287 CVE-2018-5288 CVE-2018-5289 CVE-2018-5290 CVE-2018-5291 CVE-2018-5292 CVE-2018-5293 CWE-22 CWE-79 CWE-22 CWE-79 High WordPress Plugin GD Rating System Unspecified Vulnerability (2.6) High WordPress Plugin GD Star Rating 'de' Parameter SQL Injection (1.9.10) CWE-89 CWE-89 High WordPress Plugin GD Star Rating 'export.php' Security Bypass (1.9.18) CWE-264 CWE-264 High WordPress Plugin GD Star Rating 'tpl_section' Parameter Cross-Site Scripting (1.9.16) CWE-79 CWE-79 High WordPress Plugin GD Star Rating 'votes' Parameter SQL Injection (1.9.8) CWE-89 CWE-89 High WordPress Plugin GD Star Rating 'wpfn' Parameter Cross-Site Scripting (1.9.8) CWE-79 CWE-79 High WordPress Plugin GD Star Rating Multiple Vulnerabilities (1.9.22) CVE-2014-2838 CVE-2014-2839 CWE-89 CWE-352 CWE-89 CWE-352 High WordPress Plugin GenerateBlocks Cross-Site Scripting (1.3.5) CVE-2021-24751 CWE-79 CWE-79 High WordPress Plugin Generate Child Theme Security Bypass (1.5.3) CVE-2021-24752 CWE-284 CWE-284 High WordPress Plugin Generate PDF using Contact Form 7 Cross-Site Scripting (3.5) CVE-2022-3070 CWE-79 CWE-79 High WordPress Plugin Genesis Columns Advanced Cross-Site Scripting (2.0.3) CVE-2022-4706 CWE-79 CWE-79 High WordPress Plugin Genesis Simple Defaults Arbitrary File Upload (1.0.0) CWE-434 CWE-434 High WordPress Plugin Genesis Simple Share Cross-Site Scripting (1.0.6) CWE-79 CWE-79 High WordPress Plugin Genie WP Favicon Cross-Site Request Forgery (0.5.2) CVE-2021-24674 CWE-352 CWE-352 High 1...979899100...169 98 / 169
