Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-04
Gallery for Social Photo - Security Vulnerability (CVE-2026-105967)
The Gallery for Social Photo WordPress plugin through 1.0.0.41 does not validate a user-supplied URL before using it to perform a server-side request, allowing unauthenticated attackers to make the server issue requests to arbitrary internal hosts and read the responses.
PLUGIN
Gallery for Social Photo
CVE-2026-105967
Risk Score
Threat Entry
Updated 2026-06-17
Gallery For Social Photo - Cross-Site Request Forgery (CSRF) (CVE-2022-2224)
The WordPress plugin Gallery for Social Photo is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.0.0.27 due to failure to properly check for the existence of a nonce in the function gifeed_duplicate_feed. This make it possible for unauthenticated attackers to duplicate existing posts or pages granted they can trick a site administrator into performing an action such as clicking on a link.
PLUGIN
Gallery For Social Photo
CVE-2022-2224
Risk Score