Photo Gallery Team

9 CVEs across 4 Photo Gallery Team products. Browse Photo Gallery Team vulnerabilities, severities, and proof-of-concept exploits.

Photo Gallery Team products with known CVEs

ProductCVEs
Photo Gallery By 10web4
Photo Gallery By Ays2
Photo Gallery By Ays – Responsive Image Gallery2
Photo Gallery By 10web – Mobile-Friendly Image Gallery1
Photo Gallery Team CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-33995Medium4.32024-12-13Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This i…
CVE-2024-37442Low3.82024-07-09Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery by Ays all…
CVE-2024-35628Medium4.32024-06-11Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25.
CVE-2024-33586Medium5.32024-04-29Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.20.
CVE-2024-32583High7.12024-04-18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Reflecte…
CVE-2024-29919High7.12024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Reflected…
CVE-2023-39917Medium4.32023-10-03Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.2.6 versions.
CVE-2023-32107High7.12023-08-18Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.1.3 versions.
CVE-2021-24291Medium6.12021-05-14The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.69 was vulnerable to Reflected Cross-Site Scripting (XSS) issues via the…