Cross-site scripting (XSS) vulnerability in the setTimeout function in js/jquery.prettyPhoto.js in prettyPhoto 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted PATH_INTO to the default URI.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Photo Tile For Instagram Plugin | — | Update alpine-photo-tile-for-instagram plugin to version 1.2.7.5, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Contact Bank Plugin | — | Update contact-bank plugin to version 2.0.227, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Ehive Account Details Plugin | — | Update ehive-account-details plugin to version 2.1.3, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Ehive Object Details Plugin | — | Update ehive-object-details plugin to version 2.1.7, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Embedplus For Wordpress Plugin | — | Update embedplus-for-wordpress plugin to version 5.4, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Foxyshop Plugin | — | Update foxyshop plugin to version 4.6.1, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Gallery Bank Plugin | — | Update gallery-bank plugin to version 3.0.229, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Image Slider Widget Plugin | — | Update image-slider-widget plugin to version 1.1.7, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Images Lazyload And Slideshow Plugin | — | Update images-lazyload-and-slideshow plugin to version 3.3, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Izeechat Plugin | — | Update izeechat plugin to version 1.1, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Jcwp Youtube Channel Embed Plugin | — | Update jcwp-youtube-channel-embed plugin to version 2.0.0, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Myblogu Plugin | — | Update myblogu plugin to version 0.0.8, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Onclick Show Popup Plugin | — | Update onclick-show-popup plugin to version 6.6, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Random Image Gallery With Pretty Photo Zoom Plugin | — | Update random-image-gallery-with-pretty-photo-zoom plugin to version 7.5, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Reflex Gallery Plugin | — | Update reflex-gallery plugin to version 3.1.5, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Responsive Lightbox Plugin | — | Update responsive-lightbox plugin to version 1.4.12, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| S2member Secure File Browser Plugin | — | Update s2member-secure-file-browser plugin to version 0.4.17, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Tallykit Plugin | — | Update tallykit plugin to version 5.5, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Trexanh Property Plugin | — | Update trexanh-property plugin to version 0.2, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Webrotate 360 Product Viewer Plugin | — | Update webrotate-360-product-viewer plugin to version 2.5.2, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Wp Easy Gallery Plugin | — | Update wp-easy-gallery plugin to version 4.1.1, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Wp Portfolio Gallery Plugin | — | Update wp-portfolio-gallery plugin to version 1.2.0, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Wp Video Lightbox Plugin | — | Update wp-video-lightbox plugin to version 1.7.5, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Wppizza Plugin | — | Update wppizza plugin to version 2.11.8.18, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub