High
CVE-2026-78088
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 68
Reset filters
High
CVE-2026-61986
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-16586
Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'
Medium
CVE-2026-16055
Contest Gallery <= 30.0.6 - Unauthenticated Two-Factor Authentication Bypass
Medium
CVE-2026-16056
Contest Gallery <= 30.0.6 - Missing Authorization
High
CVE-2026-65447
Contest Gallery <= 30.0.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-16057
Contest Gallery <= 30.0.6 - Missing Authorization
Medium
CVE-2026-57662
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-12165
Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter
High
CVE-2026-8912
Contest Gallery <= 28.1.6 - Unauthenticated SQL Injection
Critical
CVE-2026-42680
Contest Gallery Pro <= 29.0.1 - Unauthenticated Privilege Escalation
Medium
CVE-2026-42660
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.7 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2026-42656
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-42657
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.7 - Missing Authorization
High
CVE-2026-40771
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.6 - Unauthenticated SQL Injection
High
CVE-2026-4021
Contest Gallery <= 28.1.5 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion
Medium
CVE-2026-25035
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.2.2 - Missing Authorization
Medium
CVE-2026-24964
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2026-3180
Contest Gallery <= 28.1.4 - Unauthenticated SQL Injection
Medium
CVE-2026-24965
Contest Gallery <= 28.1.1 - Missing Authorization
Medium
CVE-2025-12849
Contest Gallery <= 28.0.2 - Missing Authorization
Medium
CVE-2025-62950
Contest Gallery <= 28.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-11254
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injection
Medium
CVE-2025-10383
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.