Pricing
Case studies
Login
Start trial
Modula Image Gallery
WP Chill
Developer
2.14.22
Latest version
100,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
14 patched
6 Mitigation rules
WordPress Modula Image Gallery - Photo Grid & Video Gallery plugin <= 2.13.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post/Page Editing vulnerability
<= 2.13.6
13/02/2026
Cross Site Scripting (XSS) vulnerability
<= 2.13.4
04/02/2026
Missing Authorization to Arbitrary Directory Listing vulnerability
<= 2.13.3
31/12/2025
Missing Authorization to Authenticated (Author+) Arbitrary Gallery Modification vulnerability
<= 2.13.3
15/12/2025
Authenticated (Author+) Arbitrary File Upload via Race Condition vulnerability
2.13.1-2.13.2
03/12/2025
Authenticated (Author+) Arbitrary File Deletion vulnerability
2.13.1-2.13.2
03/12/2025
Broken Access Control vulnerability
<= 2.13.6
22/11/2025
Improper Authorization to Authenticated (Author+) Arbitrary Image File Move vulnerability
<= 2.12.28
14/11/2025
Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library vulnerability
<= 2.10.1
03/04/2025
Authenticated (Author+) Arbitrary File Upload vulnerability
<= 2.11.10
07/01/2025
Incomplete Authorization via 'save_image' and 'save_images' vulnerability
< 2.7.5
12/09/2023
Unauth. Plugin Settings Change vulnerability
<= 2.6.9
28/10/2022
Reflected Cross-Site Scripting (XSS) vulnerability
<= 2.6.6
06/06/2022
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 2.2.4
19/02/2020