What’s Vulnerable › Products

videowhisper Picture Gallery vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your videowhisper Picture Gallery version is affected

Latest videowhisper Picture Gallery vulnerabilities

• CVE-2026-57696 — WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability (CVSS 7.1)
• CVE-2025-26581 — WordPress Picture Gallery plugin <= 1.6.3 - CSRF to Stored XSS vulnerability (CVSS 7.1)
• CVE-2024-13584 — Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-12696 — Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest Shortcode (CVSS 6.4)
• CVE-2024-34759 — WordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)