Skip to content
OpenAdvisories

Vendor

rtowebsites

5 known vulnerabilities.

Products

AdminQuickbar 2 DynamicTags 1 PostGallery 1 Dynamic Conditions 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2025-13543 Public exploit

    PostGallery <= 1.12.5 - Authenticated (Subscriber+) Arbitrary File Upload

    The PostGallery plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'PostGalleryUploader' class functions in all versions up to, and including, 1.12.5. This makes it possible for authenticated attackers, w…

    rtowebsites PostGallery Web / CMS
  • High 7.1
    CVE-2025-39464

    WordPress AdminQuickbar plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtowebsites AdminQuickbar adminquickbar allows Reflected XSS.This issue affects AdminQuickbar: from n/a through <= 1.9.1.

    rtowebsites AdminQuickbar
  • High 8.5
    CVE-2025-22348

    WordPress DynamicTags plugin <= 1.4.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtowebsites DynamicTags dynamictags allows Blind SQL Injection.This issue affects DynamicTags: from n/a through <= 1.4.0.

    rtowebsites DynamicTags