Skip to content
OpenAdvisories

Vendor

stiand

2 known vulnerabilities.

Products

Vimeo SimpleGallery 1 WP Global Screen Options 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-14170

    Vimeo SimpleGallery <= 0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification

    The Vimeo SimpleGallery plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 0.2. This is due to missing authorization checks on the `vimeogallery_admin` function hooked to `admin_menu`. This makes it possible for …

    stiand Vimeo SimpleGallery Web / CMS
  • Medium 4.3
    CVE-2025-12069

    WP Global Screen Options <= 0.2 - Cross-Site Request Forgery to Screen Options Update

    The WP Global Screen Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing nonce validation on the `updatewpglobalscreenoptions` action handler. This makes it possible for un…

    stiand WP Global Screen Options Web / CMS