PatchTheCVEphoto gallery vulnerabilities and fixes
Recent CVEs affecting photo gallery, with upgrade or downgrade steps. 9 tracked.
Also searched as: photogallery.
photo gallery has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2025-05-15. Highest priority: CVE-2025-0613 (score 32/100).
- CVE-2025-0613 MEDIUM 6.1 UPGRADE The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on ima
- CVE-2024-9878 MEDIUM 4.4 UPGRADE The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-
- CVE-2024-8670 MEDIUM 4.8 UPGRADE The Photo Gallery by 10Web WordPress plugin before 1.8.29 does not sanitise and escape some of its settings,
- CVE-2024-5968 MEDIUM 4.8 UPGRADE The Photo Gallery by 10Web WordPress plugin before 1.8.28 does not properly sanitise and escape some of its G
- CVE-2024-44043 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Ph
- CVE-2024-37442 LOW 3.8 UPGRADE Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerabili
- CVE-2024-13124 LOW 3.5 UPGRADE The Photo Gallery by 10Web WordPress plugin before 1.8.33 does not sanitise and escape some of its settings,
- CVE-2024-10704 MEDIUM 4.8 UPGRADE The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings,
- CVE-2023-33995 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Exploiting Incorrectly
FAQ
How do I fix photo gallery vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is photo gallery being exploited right now?
None of the tracked photo gallery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which photo gallery CVE should I patch first?
CVE-2025-0613 currently ranks highest (32/100): The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on ima.