gallerycreator vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20253
3. 20263

Newest CVEs

• CVE-2026-5743

  Mixed Media Gallery Blocks <= 3.3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via sliderMaxHeight Block Attribute

  gallerycreator · SimpLy Gallery

  Medium6.4
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-25345

  WordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability

  GalleryCreator · SimpLy Gallery

  Critical9.9
• CVE-2025-14288

  Gallery Blocks with Lightbox <= 3.3.0 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Modification

  gallerycreator · Mixed Media Gallery Blocks

  Medium4.3
• CVE-2025-63052

  WordPress SimpLy Gallery plugin <= 3.3.2.1 - Cross Site Scripting (XSS) vulnerability

  GalleryCreator · SimpLy Gallery

  Medium6.5
• CVE-2025-32176

  WordPress Gallery Blocks with Lightbox plugin <= 3.2.5 - Stored Cross Site Scripting (XSS) vulnerability

  GalleryCreator · SimpLy Gallery

  Medium6.5
• CVE-2024-10034

  Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.4.2 - Authenticated (Editor+) Stored Cross-Site Scripting

  gallerycreator · Mixed Media Gallery Blocks

  Medium5.5
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-5424

  Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via galleryID and className Parameters

  gallerycreator · Mixed Media Gallery Blocks

  Medium6.4