The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the add_inpost_gallery_slide_item action, which can only be triggered by an authenticated user.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Inpost Gallery Plugin | — | Update inpost-gallery plugin to version 2.1.4.2, or a newer patched version | May 15, 2025 | Mar 20, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub