Threat Database

Threat Entry Updated 2026-10-26

Photoblocks Grid Gallery - Security Vulnerability (CVE-2026-116408)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through 1.3.7.

PLUGIN Photoblocks Grid Gallery

CVE-2026-116408

MEDIUM CVSS 6.5 2026-10-26

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-26

Photoblocks Grid Gallery - Security Vulnerability (CVE-2026-114710)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through 1.3.7.

PLUGIN Photoblocks Grid Gallery

CVE-2026-114710

MEDIUM CVSS 6.5 2026-10-26

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Photoblocks Grid Gallery - Cross-Site Scripting (XSS) (CVE-2026-24389)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows DOM-Based XSS.This issue affects Gallery PhotoBlocks: from n/a through

PLUGIN Photoblocks Grid Gallery

CVE-2026-24389

MEDIUM CVSS 6.5 2026-01-22

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Photoblocks Grid Gallery - Cross-Site Scripting (XSS) (CVE-2025-58610)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-gallery allows Stored XSS.This issue affects Gallery PhotoBlocks: from n/a through

PLUGIN Photoblocks Grid Gallery

CVE-2025-58610

MEDIUM CVSS 6.5 2025-09-03

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Photoblocks Grid Gallery - Cross-Site Scripting (XSS) (CVE-2022-37407)

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in WPChill Gallery PhotoBlocks plugin

PLUGIN Photoblocks Grid Gallery

CVE-2022-37407

MEDIUM CVSS 4.1 2022-09-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Photoblocks Grid Gallery - Cross-Site Request Forgery (CSRF) (CVE-2022-36292)

Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill Gallery PhotoBlocks plugin

PLUGIN Photoblocks Grid Gallery

CVE-2022-36292

MEDIUM CVSS 5.4 2022-08-23

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Photoblocks Grid Gallery - Cross-Site Scripting (XSS) (CVE-2019-15829)

The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS.

PLUGIN Photoblocks Grid Gallery

CVE-2019-15829

MEDIUM CVSS 4.8 2019-08-30

Risk Score

Open Full Technical Breakdown