The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gallery Plugin Plugin | — | Update gallery-plugin plugin to version 4.7.0, or a newer patched version | May 15, 2025 | Mar 27, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub