wpdevart Vulnerabilities and Affected Products
Vulnerabilities associated with Gallery – Image and Video Gallery with Thumbnails.
Products
Clear product- Booking calendar, Appointment Booking System12 vulnerabilities
- Responsive Image Gallery, Gallery Album5 vulnerabilities
- Organization chart4 vulnerabilities
- booking_calendar3 vulnerabilities
- Gallery – Image and Video Gallery with Thumbnails3 vulnerabilities
- Contact Form Builder, Contact Widget2 vulnerabilities
- Responsive Vertical Icon Menu2 vulnerabilities
- Widget Countdown2 vulnerabilities
- YouTube Embed, Playlist and Popup by WpDevArt2 vulnerabilities
- Booking Calendar Pro WpDevArt1 vulnerability
- Coming soon and Maintenance mode1 vulnerability
- Contact Form Builder1 vulnerability
- Countdown and CountUp, WooCommerce Sales Timer1 vulnerability
- Countdown and CountUp, WooCommerce Sales Timers1 vulnerability
- Countdown Timer – Widget Countdown1 vulnerability
- Image and Video Lightbox, Image PopUp1 vulnerability
- Poll, Survey, Questionnaire and Voting system1 vulnerability
- Poll, Survey, Questionnaire and Voting system (WordPress plugin)1 vulnerability
- poll\,_survey\,_questionnaire_and_voting_system1 vulnerability
- Pricing Table builder1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-45630HIGH | WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)Unauth. Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 versions. CWE-79Oct 18, 2023 | CVSS7.1v3.1 | EPSS0.313% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-45629MEDIUM | WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 versions. CWE-352Oct 16, 2023 | CVSS5.4v3.1 | EPSS0.184% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-47603HIGH | WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.1 versions. CWE-79Mar 29, 2023 | CVSS7.1v3.1 | EPSS0.422% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |