Photo Gallery Team Vulnerabilities and Affected Products
Vulnerabilities associated with Photo Gallery by 10Web.
Products
Clear product- Photo Gallery by 10Web4 vulnerabilities
- Photo Gallery by Ays2 vulnerabilities
- Photo Gallery by Ays – Responsive Image Gallery2 vulnerabilities
- Photo Gallery by 10Web – Mobile-Friendly Image Gallery1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-33995MEDIUM | WordPress Photo Gallery by 10Web plugin <= 1.8.15 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Gallery by 10Web: from n/a through 1.8.15. CWE-862Dec 13, 2024 | CVSS4.3v3.1 | EPSS0.498% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-35628MEDIUM | WordPress Photo Gallery by 10Web plugin <= 1.8.25 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25. CWE-862Jun 11, 2024 | CVSS4.3v3.1 | EPSS0.346% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-33586MEDIUM | WordPress Photo Gallery by 10Web plugin <= 1.8.20 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.20. CWE-862Apr 29, 2024 | CVSS5.3v3.1 | EPSS0.372% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-32583HIGH | WordPress Photo Gallery by 10Web plugin <= 1.8.21 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Reflected XSS.This issue affects Photo Gallery by 10Web: from n/a through 1.8.21. CWE-79Apr 18, 2024 | CVSS7.1v3.1 | EPSS0.345% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |