Envira Photo Gallery
Syed Balkhi
Developer
1.16.3
Latest version
100,000
Installations
No date
Last updated
Vulnerability history
0 present
21 patched
5 Mitigation rules
- Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability< 1.16.212/10/2026
- Author+ Non-Public Post Title and Excerpt Disclosure vulnerability< 1.16.211/10/2026
- Contributor Missing Authorization vulnerability< 1.16.211/10/2026
- Author+ IDOR vulnerability< 1.16.211/10/2026
- Missing Authorization vulnerability<= 1.16.109/10/2026
- Author+ Stored XSS vulnerability< 1.16.107/10/2026
- Author+ Stored XSS vulnerability< 1.16.107/10/2026
- Authenticated (Author+) Stored Cross-Site Scripting via Gallery Description vulnerability<= 1.12.428/08/2026
- Broken Access Control vulnerability<= 1.12.515/06/2026
- Authenticated (Author+) Stored Cross-Site Scripting vulnerability<= 1.12.413/05/2026
- Authenticated (Author+) Stored Cross-Site Scripting via 'justified_gallery_theme' Parameter via REST API vulnerability<= 1.12.303/03/2026
- Missing Authorization to Authenticated (Author+) Multiple Gallery Actions vulnerability<= 1.12.013/11/2025
- Missing Authorization to Authenticated (Contributor+) Gallery Conversion vulnerability<= 1.11.010/11/2025
- Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library<= 1.8.1503/12/2024
- Author+ Stored XSS vulnerability< 1.8.1511/09/2024
- Broken Access Control vulnerability<= 1.8.1426/08/2024
- CSRF leading to notice dismissal vulnerability<= 1.8.7.320/06/2024
- Missing Authorization to Gallery Modification vulnerability<= 1.8.7.208/01/2024
- Reflected Cross-Site Scripting (XSS) vulnerability<= 1.8.4.610/10/2022
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 1.8.3.219/12/2020
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 1.7.625/02/2020