Advisories · Technology

WP Chill Modula Image Gallery.

Every CVE that names WP Chill Modula Image Gallery among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-105876 CVE record

CVSS 5.3 Medium

WordPress Modula Image Gallery plugin <= 3.0.11 - Sensitive Data Exposure vulnerability
- WP Chill Modula Image Gallery
- Broken access control
Not analysed yet 7 Oct 2026
CVE-2026-65475 CVE record

CVSS 6.5 Medium

WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability
- WP Chill Modula Image Gallery
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2026
CVE-2026-42688 CVE record

CVSS 6.5 Medium

WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability
- WP Chill Modula Image Gallery
- Cross-site scripting (XSS)
Not analysed yet 15 Jun 2026
CVE-2026-39481 CVE record

CVSS 7.2 High

WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability
- WP Chill Modula Image Gallery
- Insecure deserialization
Not analysed yet 15 Jun 2026
CVE-2026-24939 CVE record

CVSS 4.3 Medium

WordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerability
- WP Chill Modula Image Gallery
- Broken access control
Not analysed yet 3 Feb 2026
CVE-2026-23976 CVE record

CVSS 5.9 Medium

WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability
- WP Chill Modula Image Gallery
- Cross-site scripting (XSS)
Not analysed yet 22 Jan 2026