Login Request a demo
EG
Product
Envira Gallery
by Enviragallery · last CVE Nov 1, 2024
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 1Medium 7Low 0
Severity
All severities8Critical0High1Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Envira Gallery to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-2190
6.1
1%
Oct 31
Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting
Affected: before 1.8.4.7
CVE-2021-24126
5.4
1%
Mar 18
Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting
Affected: before 1.8.3.3
CVE-2020-35582
5.4
1%
Jan 15
A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php…
Affected: before 1.8.3.3
CVE-2020-35581
5.4
1%
Jan 15
A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST…
Affected: before 1.8.3.3
CVE-2020-9334
5.4
1%
Feb 25
A stored XSS vulnerability exists in the Envira Photo Gallery plugin through 1.7.6 for WordPress
Affected: through 1.7.6
CVE-2024-3899
4.8
0%
Sep 11
Envira Gallery < 1.8.15 - Author+ Stored XSS
Affected: before 1.8.15
CVE-2023-6742
4.3
0%
Jan 11
Envira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images
Affected: through 1.8.7.1
Showing 7