Skip to content
OpenAdvisories

Vendor

LCweb

6 known vulnerabilities.

Products

PrivateContent 2 Global Gallery 2 Global Gallery - WordPress Responsive Gallery 1 PrivateContent - Mail Actions 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-73184

    WordPress Global Gallery plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.

    LCweb Global Gallery
  • High 7.5
    CVE-2025-47627

    WordPress PrivateContent - Mail Actions plugin <= 2.3.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LCweb PrivateContent - Mail Actions allows PHP Local File Inclusion. This issue affects PrivateContent - Mail Actions: from n/a through 2.…

    LCweb PrivateContent - Mail Actions