Known vulnerabilities in maxfoundry MaxGalleria
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-97260 | Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions | 7.1 High | Oct 1, 2026 |
| CVE-2024-5970 | The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallery_thumb… | 6.4 Medium | Jun 18, 2024 |
| CVE-2024-3581 | The MaxGalleria plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the… | 4.3 Medium | May 2, 2024 |