Skip to content

Known vulnerabilities in smub Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More

Is your version affected?

CVE Summary Score Published
CVE-2026-3423 The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description'… 6.4 Medium Aug 28, 2026
CVE-2026-5361 The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions… 6.4 Medium May 14, 2026
CVE-2026-1236 The Envira Gallery for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium Mar 4, 2026
CVE-2025-12377 The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized… 4.3 Medium Nov 13, 2025
CVE-2025-11448 The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized… 4.3 Medium Nov 8, 2025
CVE-2024-5020 Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox… 6.4 Medium Dec 4, 2024
CVE-2023-6742 The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized… 4.3 Medium Jan 11, 2024

Other smub products