Vendor

contest-gallery

21 known vulnerabilities.

Products

Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe 15 Contest Gallery 3 Contest Gallery (WordPress plugin) 2 Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2024-11103

Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeover

The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes …

contest-gallery Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe Web / CMS

Nov 28, 2024
Critical 9.8

CVE-2024-10687

Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injection

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to time-based SQL Injection via the $collectedIds parameter in all versions up to, and i…

contest-gallery Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe Web / CMS

Nov 5, 2024