What’s Vulnerable › Products

Contest Gallery vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Contest Gallery version is affected

Latest Contest Gallery vulnerabilities

• CVE-2026-107447 — Contest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter Identity (CVSS 5.3)
• CVE-2026-107120 — Contest Gallery < 33.0.1 - Unauthenticated Email Verification Bypass via Brute-Forceable Registration PIN (CVSS 5.3)
• CVE-2026-16055 — Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login (CVSS 7.5)
• CVE-2026-16056 — Contest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts (CVSS 4.3)
• CVE-2026-16057 — Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library (CVSS 6.5)