Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Contest Gallery - Cross-Site Scripting (XSS) (CVE-2022-27853)
Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) in Contest Gallery (WordPress plugin)
PLUGIN
Contest Gallery
CVE-2022-27853
Risk Score
Threat Entry
Updated 2026-06-17
Contest Gallery - Cross-Site Scripting (XSS) (CVE-2021-24915)
The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the list of all users registered on the blog, including their username and email address
PLUGIN
Contest Gallery
CVE-2021-24915
Risk Score
Threat Entry
Updated 2026-06-17
Contest Gallery - Cross-Site Request Forgery (CSRF) (CVE-2019-5974)
Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
PLUGIN
Contest Gallery
CVE-2019-5974
Risk Score