Vulnerability history

Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata Exposure vulnerability

Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability

Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates vulnerability

Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Size vulnerability

Reflected Cross-Site Scripting vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL vulnerability

Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields vulnerability

FooGallery plugin <= 2.4.7 -Authenticated Stored Cross-Site Scripting vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Option Update vulnerability (Fremius Library security issue)