MI
Product
Modula Image Gallery – Photo Grid & Video Gallery
9
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 5Low 0
Watch
Add Modula Image Gallery – Photo Grid & Video Gallery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-12853 | 8.8 | Jan 8 | Modula Image Gallery <= 2.11.10 - Authenticated (Author+) Arbitrary File Upload Affected: through 2.11.10 |
| CVE-2026-92713 | 8.1 | Sep 25 | Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter Affected: through 3.0.2 |
| CVE-2026-107659 | 7.5 | Oct 16 | Modula Image Gallery <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Exposed 'modulaSettings' REST field on the modula-gallery CPT Affected: through 3.0.11 |
| CVE-2026-89406 | 7.5 | Sep 25 | Modula Image Gallery <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure via 'modula_gallery_id' and 'modula_image_id' Parameters Affected: through 3.0.1 |
Showing 4