Vulnerabilidades en GalleryCreator
9 resultadosAnálisis Vexday
GalleryCreator apresenta um perfil de risco controlado com apenas 3 vulnerabilidades catalogadas, nenhuma delas atualmente sob exploração ativa. A presença de 1 vulnerabilidade crítica associada a Cross-Site Scripting (CWE-79) demanda atenção, mas o risco é mitigado pela ausência de atividade exploratória no terreno e pela falta de divulgações recentes que pudessem amplificar a exposição.
CVE-2024-5424MEDIUMGallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via galleryID and className ParametersEPSS 0.5%CVE-2026-25345CRITICALWordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerabilityEPSS 0.4%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2025-32176MEDIUMWordPress Gallery Blocks with Lightbox plugin <= 3.2.5 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-10034MEDIUMGallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.4.2 - Authenticated (Editor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2026-5743MEDIUMMixed Media Gallery Blocks <= 3.3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via sliderMaxHeight Block AttributeEPSS 0.3%CVE-2025-14288MEDIUMGallery Blocks with Lightbox <= 3.3.0 - Missing Authorization to Authenticated (Contributor+) Plugin Settings ModificationEPSS 0.2%CVE-2025-63052MEDIUMWordPress SimpLy Gallery plugin <= 3.3.2.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%