What’s Vulnerable › Vulnerabilities

CVE-2014-8758

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-06 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Best Gallery Albums Plugin before 3.0.70for WordPress allows remote attackers to inject arbitrary web script or HTML via the order_id parameter in the gallery_album_sorting page to wp-admin/admin.php.

Affected products

• Tech-Banker Gallery Bank: through 3.0.69

References

• https://g0blin.co.uk/cve-2014-8758/
• https://wpvulndb.com/vulnerabilities/8236
• https://g0blin.co.uk/cve-2014-8758/
• https://wpvulndb.com/vulnerabilities/8236

Get alerted when CVE-2014-8758 or the next vulnerability affects your stack