Known vulnerabilities in 10web photo_gallery
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-32583 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team… | 7.1 High | Apr 18, 2024 |
| CVE-2024-29833 | The image upload component allows SVG files and the regular expression used to remove script tags can be bypassed by… | 5.4 Medium | Mar 26, 2024 |
| CVE-2024-29810 | The thumb_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected… | 5.4 Medium | Mar 26, 2024 |
| CVE-2024-29809 | The image_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected… | 5.4 Medium | Mar 26, 2024 |
| CVE-2024-29808 | The image_id parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross… | 5.4 Medium | Mar 26, 2024 |
| CVE-2024-29832 | The current_url parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross… | 6.1 Medium | Mar 26, 2024 |
| CVE-2024-0221 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal… | 9.1 Critical | Feb 5, 2024 |
Other 10web products
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder 18
Photo Gallery by 10Web – Mobile-Friendly Image Gallery 15
Photo Gallery by 10Web 6
10Web Booster – Website speed optimization, Cache & Page Speed optimizer 5
Slider by 10Web 5
PhotoGallery 5
Form Maker by 10Web 4
slider 4
10Web Map Builder for Google Maps 3
10WebAnalytics 2
10Web Social Photo Feed 2
Form Maker 1