High
CVE-2025-7725
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 68
Reset filters
Medium
CVE-2025-48291
Contest Gallery <= 26.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-6716
Contest Gallery <= 26.0.8 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-3862
Contest Gallery <= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
High
CVE-2025-1513
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 26.0.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22693
Contest Gallery <= 25.1.0 - Authenticated (Author+) SQL Injection
Medium
CVE-2024-56237
Contest Gallery <= 24.0.3 - Authenticated (Author+) Stored Cross-Site Scripting
Critical
CVE-2024-11103
Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover
Critical
CVE-2024-10687
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injection
Medium
CVE-2024-43283
Contest Gallery <= 23.1.2 - Unauthenticated Information Exposure
Medium
CVE-2024-39631
Contest Gallery <= 23.1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-32778
Contest Gallery <= 21.3.4 - Authenticated (Author+) Arbitrary File Deletion
Medium
CVE-2024-30428
Contest Gallery <= 21.3.5 - Reflected Cross-Site Scripting
Critical
CVE-2024-30236
Photos and Files Contest Gallery <= 21.3.4 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2024-30238
Photos and Files Contest Gallery <= 21.3.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-1487
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress <= 21.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-24887
Contest Gallery <= 21.2.8.4 - Cross-Site Request Forgery
Medium
f2b5213d-fdc5-4c98-9a05-15d83bd7308f
Contest Gallery <= 21.2.8.4 - Cross-Site Request Forgery
Medium
CVE-2023-5307
Contest Gallery < 21.2.8.1 - Unauthenticated Stored Cross-Site Scripting via headers
Medium
CVE-2023-28784
Contest Gallery <= 21.1.2 - Reflected Cross-Site Scripting
High
CVE-2022-4166
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via addCountS
High
CVE-2022-4150
Contest Gallery (Pro) <= 19.1.5 - SQL Injection via option_id
High
CVE-2022-4153
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via upload[]
High
CVE-2022-4159
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via cg_id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.