Lcweb

6 CVEs in 5 Lcweb products, including Global Gallery, Privatecontent, Global Gallery. Newest: CVE-2026-73184 (2026-08-19).

Lcweb products with known CVEs

ProductCVEs
Global Gallery2
Privatecontent2
Global Gallery1
Global Gallery - WordPress Responsive Gallery1
Privatecontent - Mail Actions1
Lcweb CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73184High7.12026-08-19Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
CVE-2026-57692Critical9.82026-07-01Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from n/a through 9.9.2.
CVE-2025-52721Medium6.52025-08-14Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global…
CVE-2025-47627High7.52025-07-04Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LCweb PrivateContent - Mail Actions al…
CVE-2024-13814Medium5.42025-02-12The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including…
CVE-2023-0581Medium5.32023-01-30The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including…