What’s Vulnerable › Products

RealMag777 InPost Gallery vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your RealMag777 InPost Gallery version is affected

Latest RealMag777 InPost Gallery vulnerabilities

• CVE-2026-39574 — WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-57889 — WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability (CVSS 7.5)
• CVE-2025-26903 — WordPress InPost Gallery plugin <= 2.1.4.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2024-11002 — InPost Gallery <= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template (CVSS 6.3)
• CVE-2023-28666 — (CVSS 5.4)
• CVE-2022-4063 — InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE (CVSS 9.8)