Filtered by vendor Contest-gallery Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-36394 1 Contest-gallery 1 Contest Gallery 2022-08-25 8.8 High
Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin <= 17.0.4 at WordPress.
CVE-2022-27853 1 Contest-gallery 1 Contest Gallery 2022-04-25 4.8 Medium
Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) in Contest Gallery (WordPress plugin) <= 13.1.0.9
CVE-2019-5974 1 Contest-gallery 1 Contest Gallery 2019-07-15 N/A
Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors.