Medium · 4.1 CVE-2022-37407 EUVD-2022-40040GHSA-89gf-w2pr-4j73

WordPress Gallery PhotoBlocks plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Published Sep 9, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.

Vendor	Product	Affected	Fixed
WPChill	Gallery PhotoBlocks (WordPress plugin)	<= 1.2.6 – ≤ 1.2.6	—