Advisories · Technology

wpsofts Portfolio, Gallery, Product Catalog – Grid KIT Portfolio.

Every CVE that names wpsofts Portfolio, Gallery, Product Catalog – Grid KIT Portfolio among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-5092 CVE record

CVSS 6.4 Medium

Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library
- lightgalleryteam LightGallery WP
- tplugins TP WooCommerce Product Gallery
- Cross-site scripting (XSS)
Not analysed yet 20 Nov 2025