photospace gallery vulnerabilities and fixes

Q: How do I fix photospace gallery vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is photospace gallery being exploited right now?

None of the tracked photospace gallery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which photospace gallery CVE should I patch first?

CVE-2022-3991 currently ranks highest (40/100): The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings para.

Recent CVEs affecting photospace gallery, with upgrade or downgrade steps. 2 tracked.

Also searched as: photospacegallery.

photospace gallery has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-11-29. Highest priority: CVE-2022-3991 (score 40/100).

CVE-2022-3991 MEDIUM 6.4 UPGRADE The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings para
CVE-2022-38135 MEDIUM 5.4 UPGRADE Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows us

FAQ

How do I fix photospace gallery vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is photospace gallery being exploited right now?

None of the tracked photospace gallery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which photospace gallery CVE should I patch first?

CVE-2022-3991 currently ranks highest (40/100): The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings para.

← Back to latest CVEs