Skip to content
OpenAdvisories

Vendor

devrix

7 known vulnerabilities.

Products

Easy Image Gallery 2 Restrict User Registration 2 Hashtags 1 DX Dark Site 1 DX Sales CRM 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-4766

    Easy Image Gallery <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Shortcode Post Meta

    The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and including, 1.5.3. This is due to insufficient input sanitization and output escaping on user-supplied…

    devrix Easy Image Gallery Web / CMS
  • Medium 5.3
    CVE-2025-9892

    Restrict User Registration <= 1.0.1 - Cross-Site Request Forgery to Settings Update

    The Restrict User Registration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the update() function. This makes it possible for unauthentica…

    devrix Restrict User Registration Web / CMS
  • Medium 6.4
    CVE-2025-2540

    Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via prettyPhoto JavaScript Library

    Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled prettyPhoto library (version 3.1.6) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

    devrix fuzzoid nayon46 wptipsntricks