sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total63
Critical5
High22
Medium36
Reset
Showing 1-20 of 63 records
Threat Entry Updated 2026-10-10

Contest Gallery - Security Vulnerability (CVE-2026-107120)

The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeric PIN, allowing unauthenticated attackers to brute-force the PIN and create and activate a WordPress account bound to an email address they do not own, gaining an authenticated session.

PLUGIN Contest Gallery

CVE-2026-107120

MEDIUM CVSS 5.3 2026-10-10
Open Full Technical Breakdown
Threat Entry Updated 2026-09-16

Contest Gallery - Security Vulnerability (CVE-2026-78088)

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Overwrite in all versions up to, and including, 32.0.1 due to insufficient file path validation in the 'baseUrlForFacebook' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite known files which may lead to remote code execution when certain preconditions are met.

PLUGIN Contest Gallery

CVE-2026-78088

HIGH CVSS 8.8 2026-09-16
Open Full Technical Breakdown
Threat Entry Updated 2026-08-20

Contest Gallery - SQL Injection (CVE-2026-16586)

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId' in all versions up to, and including, 30.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

PLUGIN Contest Gallery

CVE-2026-16586

MEDIUM CVSS 6.5 2026-08-15
Open Full Technical Breakdown
Threat Entry Updated 2026-08-26

Contest Gallery - Security Vulnerability (CVE-2026-16055)

The Contest Gallery WordPress plugin before 30.0.7 does not route its front-end login through the standard WordPress authentication flow, issuing an authentication cookie directly after the password check, which bypasses installed brute-force-protection and two-factor-authentication Contest Gallery WordPress plugin before 30.0.7 and enables unlimited, unthrottled password guessing against any account (including administrators) up to full account takeover.

PLUGIN Contest Gallery

CVE-2026-16055

HIGH CVSS 7.5 2026-08-05
Open Full Technical Breakdown
Threat Entry Updated 2026-08-26

Contest Gallery - Cross-Site Request Forgery (CSRF) (CVE-2026-16057)

The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-membership test, which allows any Author-level or higher user to permanently delete arbitrary posts, pages, and other content they do not own.

PLUGIN Contest Gallery

CVE-2026-16057

MEDIUM CVSS 6.5 2026-08-03
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Contest Gallery - Privilege Escalation (CVE-2026-12165)

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 30.0.2 via the `RegistryUserRole` parameter. This is due to the plugin's admin menu being registered at the `edit_posts` capability level — granting Contributor-level users access to the plugin's admin pages and a valid `cg_admin` nonce — while the option-saving handler in `change-options-and-sizes.php` performs no `current_user_can()` capability check beyond `check_admin_referer('cg_admin')`, and the `RegistryUserRole` value is processed only through `sanitize_text_field()` and `htmlentities()` without…

PLUGIN Contest Gallery

CVE-2026-12165

HIGH CVSS 8.8 2026-06-17
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Contest Gallery - SQL Injection (CVE-2026-8912)

The Contest Gallery plugin for WordPress is vulnerable to SQL Injection via the 'form_input' parameter in versions up to, and including, 28.1.6. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query inside the unauthenticated 'post_cg_gallery_form_upload' AJAX action (specifically the 'cb' branch of the included users-upload-check.php, where $f_input_id is concatenated unquoted into 'SELECT Field_Content FROM ... WHERE id = $f_input_id'). The endpoint is gated only by a public frontend nonce ('cg1l_action' / 'cg_nonce') that is exposed in the page…

PLUGIN Contest Gallery

CVE-2026-8912

HIGH CVSS 7.5 2026-05-19
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Contest Gallery - Authentication Bypass (CVE-2026-25035)

Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through

PLUGIN Contest Gallery

CVE-2026-25035

CRITICAL CVSS 9.8 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Contest Gallery - Authentication Bypass (CVE-2026-4021)

The Contest Gallery plugin for WordPress is vulnerable to an authentication bypass leading to admin account takeover in all versions up to, and including, 28.1.5. This is due to the email confirmation handler in `users-registry-check-after-email-or-pin-confirmation.php` using the user's email string in a `WHERE ID = %s` clause instead of the numeric user ID, combined with an unauthenticated key-based login endpoint in `ajax-functions-frontend.php`. When the non-default `RegMailOptional=1` setting is enabled, an attacker can register with a crafted email starting with the target user ID (e.g., `1poc@example.test`), trigger the confirmation flow to…

PLUGIN Contest Gallery

CVE-2026-4021

HIGH CVSS 8.1 2026-03-24
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Contest Gallery - SQL Injection (CVE-2026-3180)

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to blind SQL Injection via the ‘cgLostPasswordEmail’ and the ’cgl_mail’ parameter in all versions up to, and including, 28.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The vulnerability's ’cgLostPasswordEmail’ parameter was patched…

PLUGIN Contest Gallery

CVE-2026-3180

HIGH CVSS 7.5 2026-03-02
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Contest Gallery - Broken Access Control (CVE-2026-24965)

Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contest Gallery: from n/a through

PLUGIN Contest Gallery

CVE-2026-24965

MEDIUM CVSS 4.3 2026-02-03
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.