Advisories · Technology

Contest Gallery.

Every CVE that names Contest Gallery among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107447 CVE record

CVSS 5.3 Medium

Contest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter Identity
- Contest Gallery
- Authentication bypass
Not analysed yet 21 Oct 2026
CVE-2026-107120 CVE record

CVSS 5.3 Medium

Contest Gallery < 33.0.1 - Unauthenticated Email Verification Bypass via Brute-Forceable Registration PIN
- Contest Gallery
- Authentication bypass
Not analysed yet 10 Oct 2026
CVE-2026-16055 CVE record

CVSS 7.5 High

Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login
- Contest Gallery
- Authentication bypass
Not analysed yet 5 Aug 2026
CVE-2026-16056 CVE record

CVSS 4.3 Medium

Contest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts
- Contest Gallery
- Broken access control
Not analysed yet 4 Aug 2026
CVE-2026-16057 CVE record

CVSS 6.5 Medium

Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library
- Contest Gallery
- Broken access control
Not analysed yet 3 Aug 2026
CVE-2023-28784 CVE record

CVSS 7.1 High

WordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)
- Contest Gallery
- Cross-site scripting (XSS)
Not analysed yet 22 Jun 2023
CVE-2022-4160 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4151 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5 - Admin+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
- SQL injection
Not analysed yet 26 Dec 2022
CVE-2022-4159 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5.1 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4152 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4162 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4164 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4156 CVE record

CVSS 7.5 High

Contest Gallery < 19.1.5.1 - Unauthenticated SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4163 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4166 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4150 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4158 CVE record

CVSS 7.5 High

Contest Gallery < 19.1.5 - Unauthenticated SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4165 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4155 CVE record

CVSS 4.9 Medium

Contest Gallery < 19.1.5 - Admin+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4157 CVE record

CVSS 4.9 Medium

Contest Gallery < 19.1.5 - Admin+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4153 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5.1 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-4161 CVE record

CVSS 6.5 Medium

Contest Gallery < 19.1.5 - Author+ SQL Injection
- Contest Gallery
- Contest Gallery Pro
Not analysed yet 26 Dec 2022
CVE-2022-45848 CVE record

CVSS 6.1 Medium

WordPress Contest Gallery Plugin <= 13.1.0.9 is vulnerable to Cross Site Scripting (XSS)
- Contest Gallery
- Cross-site scripting (XSS)
Not analysed yet 6 Dec 2022