CVE Intelligence

Wasiliy Strecker / ContestGallery developer Contest Gallery vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Wasiliy Strecker / ContestGallery developer Contest Gallery: 5 record(s), with affected versions and fixes.

CVE-2026-65447 High · 7.1 CWE-79 Jul 27, 2026
WordPress Contest Gallery plugin <= 30.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
CVE-2026-25035 Critical · 9.8 CWE-288 Mar 25, 2026
WordPress Contest Gallery plugin <= 28.1.2.2 - Account Takeover vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2.
CVE-2026-24964 Medium · 6.4 CWE-918 Mar 25, 2026
WordPress Contest Gallery plugin <= 28.1.2.1 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.1.2.1.
CVE-2026-24965 Medium · 4.3 CWE-862 Feb 3, 2026
WordPress Contest Gallery plugin <= 28.1.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contest Gallery: from n/a through <= 28.1.1.
CVE-2025-62950 Medium · 4.3 CWE-352 Nov 6, 2025
WordPress Contest Gallery plugin <= 28.0.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Cross Site Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.0.0.