sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total7
Critical0
High0
Medium7
Reset
Showing 1-7 of 7 records
Threat Entry Updated 2026-10-10

Gallery PhotoBlocks - Security Vulnerability (CVE-2026-107323)

The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing the gallery, including administrators.

PLUGIN Gallery PhotoBlocks

CVE-2026-107323

MEDIUM CVSS 6.8 2026-10-10
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Gallery PhotoBlocks - Cross-Site Request Forgery (CSRF) (CVE-2022-4974)

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

PLUGIN Gallery PhotoBlocks

CVE-2022-4974

MEDIUM CVSS 6.3 2024-10-16
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.