<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: smub-envira-gallery-image-photo-gallery-albums-video-gallery-slideshows-more</title><description>Every new CVE for smub-envira-gallery-image-photo-gallery-albums-video-gallery-slideshows-more.</description><link>https://agentprime.io/</link><item><title>CVE-2026-3423: Envira Gallery &lt;= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via Gallery Description</title><link>https://agentprime.io/advisories/CVE-2026-3423/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3423/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Aug 2026 11:29:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5361: Envira Gallery &lt;= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via &apos;arrows&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-5361/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5361/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 May 2026 03:27:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-1236: Envira Gallery for WordPress &lt;= 1.12.3 - Authenticated (Author+) Stored Cross-Site Scripting via &apos;justified_gallery_theme&apos; Parameter via REST API</title><link>https://agentprime.io/advisories/CVE-2026-1236/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-1236/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Mar 2026 08:23:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12377: Gallery Plugin for WordPress – Envira Photo Gallery &lt;= 1.12.0 - Missing Authorization to Authenticated (Author+) Multiple Gallery Actions</title><link>https://agentprime.io/advisories/CVE-2025-12377/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12377/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Nov 2025 11:29:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-11448: Gallery Plugin for WordPress – Envira Photo Gallery &lt;= 1.11.0 - Missing Authorization to Authenticated (Contributor+) Gallery Conversion</title><link>https://agentprime.io/advisories/CVE-2025-11448/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-11448/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 08 Nov 2025 09:28:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-5020: Multiple Plugins &lt;= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library</title><link>https://agentprime.io/advisories/CVE-2024-5020/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5020/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Dec 2024 08:22:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6742: Envira Gallery Lite &lt;= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images</title><link>https://agentprime.io/advisories/CVE-2023-6742/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6742/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 11 Jan 2024 08:32:32 GMT</pubDate><category>CVE</category></item></channel></rss>