Advisories · Technology

Photo Gallery by 10Web.

Every CVE that names Photo Gallery by 10Web among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42715 CVE record

CVSS 7.1 High

WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability
- Photo Gallery by 10Web
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2026
CVE-2026-102377 CVE record

CVSS 8.8 High

WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability
- Photo Gallery by 10Web
- Insecure deserialization
Not analysed yet 30 Sept 2026
CVE-2026-12865 CVE record

CVSS 7.1 High

Photo Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged Parameters
- Photo Gallery by 10Web
- Cross-site scripting (XSS)
Not analysed yet 2 Sept 2026
CVE-2026-49771 CVE record

CVSS 7.6 High

WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability
- Photo Gallery by 10Web
- SQL injection
Not analysed yet 4 Jun 2026
CVE-2026-32330 CVE record

CVSS 4.3 Medium

WordPress Photo Gallery by 10Web plugin <= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerability
- Photo Gallery by 10Web
- Cross-site request forgery (CSRF)
Not analysed yet 13 Mar 2026
CVE-2026-27360 CVE record

CVSS 5.9 Medium

WordPress Photo Gallery by 10Web plugin <= 1.8.38 - Cross Site Scripting (XSS) vulnerability
- Photo Gallery by 10Web
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2026
CVE-2024-8670 CVE record

CVSS 4.8 Medium

Photo Gallery by 10Web < 1.8.29 - Admin+ Stored XSS
- Photo Gallery by 10Web
Not analysed yet 15 May 2025
CVE-2025-0613 CVE record

CVSS 6.1 Medium

Photo Gallery < 1.8.34 - Unauthenticated Stored XSS
- Photo Gallery by 10Web
Not analysed yet 31 Mar 2025
CVE-2024-13124 CVE record

CVSS 3.5 Low

Photo Gallery by 10Web < 1.8.33 - Admin+ Stored XSS
- Photo Gallery by 10Web
Not analysed yet 24 Mar 2025
CVE-2024-10704 CVE record

CVSS 4.8 Medium

Photo Gallery by 10Web < 1.8.31 - Admin+ Stored XSS
- Photo Gallery by 10Web
Not analysed yet 29 Nov 2024
CVE-2024-5968 CVE record

CVSS 4.8 Medium

Photo Gallery by 10Web <= 1.8.27 - Admin+ Stored XSS
- Photo Gallery by 10Web
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2024
CVE-2024-44043 CVE record

CVSS 5.9 Medium

WordPress Photo Gallery by 10Web plugin <= 1.8.27 - Cross Site Scripting (XSS) vulnerability
- Photo Gallery by 10Web
- Cross-site scripting (XSS)
Not analysed yet 6 Oct 2024
CVE-2023-1427 CVE record

CVSS 4.9 Medium

Photo Gallery by 10Web < 1.8.15 - Admin+ Path Traversal
- Photo Gallery by 10Web
Not analysed yet 17 Apr 2023
CVE-2022-4058 CVE record

Photo Gallery < 1.8.3 - Stored XSS via CSRF
- Photo Gallery by 10Web
Not analysed yet 19 Dec 2022
CVE-2021-24139 CVE record

Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection
- Photo Gallery by 10Web
- SQL injection
Not analysed yet 18 Mar 2021