Login Request a demo
PG
Product
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
by 10web · last CVE Oct 15, 2026
14
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 0High 2Medium 12Low 0
Severity
All severities14Critical0High2Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Photo Gallery by 10Web – Mobile-Friendly Image Gallery to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-5481
8.8
1%
Jun 7
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function
Affected: through 1.8.23
CVE-2024-0221
7.2
1%
Feb 5
Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename
Affected: through 1.8.19
CVE-2026-85652
6.5
1%
Sep 18
Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute
Affected: through 1.8.44
CVE-2026-9829
6.5
0%
Jun 6
Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter
Affected: through 1.8.41
CVE-2026-7048
6.5
1%
May 28
Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute
Affected: through 1.8.40
CVE-2026-86311
6.4
0%
Sep 17
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Affected: through 1.8.44
CVE-2026-18557
6.1
0%
Oct 15
Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter
Affected: through 1.8.42
CVE-2026-92974
6.1
0%
Oct 3
Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter
Affected: through 1.8.46
CVE-2025-2269
6.1
0%
Apr 11
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter
Affected: through 1.8.34
CVE-2024-5426
5.4
0%
Jun 7
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG
Affected: through 1.8.23
CVE-2026-1036
5.3
0%
Jan 21
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion
Affected: through 1.8.36
CVE-2024-9878
4.8
0%
Nov 5
Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
Affected: through 1.8.30
CVE-2024-2296
4.8
0%
Apr 6
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG
Affected: through 1.8.21
CVE-2023-6924
4.8
0%
Jan 11
Photo Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget
Affected: through 1.8.18
Showing 14