Skip to content
OpenAdvisories
Medium · 6.4 CVE-2026-24964 EUVD-2026-15576GHSA-4f94-fq23-hch4

WordPress Contest Gallery plugin <= 28.1.2.1 - Server Side Request Forgery (SSRF) vulnerability

Published Mar 25, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.1.2.1.

Affected products

VendorProductAffectedFixed
Wasiliy Strecker / ContestGallery developer Contest Gallery ≤ 28.1.2.1 —

References