Known Vulnerabilities for Media Gallery by Geeklog
Listed below are 1 of the newest known vulnerabilities associated with "Media Gallery" by "Geeklog".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111971 json | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not sanitise and escape collection and gall... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-106646 json | The Classified Listing WordPress plugin before 6.1.1 does not verify that the requester owns or can edit the target listing ... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-105977 json | The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-104681 json | The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a me... | Not Provided | 2026-10-11 | 2026-10-11 |
| CVE-2026-78088 json | The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Unauthen... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-74923 json | The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gall... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-56830 json | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earlier product sub-form hardening change left store() in pa... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-39785 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmedia Ph... | Not Provided | 2026-10-06 | 2026-10-13 |
| CVE-2026-19717 json | The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its... | Not Provided | 2026-08-16 | 2026-08-17 |
| CVE-2026-16586 json | The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Second-O... | Not Provided | 2026-08-15 | 2026-08-17 |