Modula Image Gallery
WP Chill
Developer
2.14.28
Latest version
100,000
Installations
No date
Last updated
Vulnerability history
0 present
16 patched
8 Mitigation rules
- Cross Site Scripting (XSS) vulnerability<= 2.14.237 days ago
- PHP Object Injection vulnerability<= 2.14.1820/04/2026
- WordPress Modula Image Gallery - Photo Grid & Video Gallery plugin <= 2.13.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post/Page Editing vulnerability<= 2.13.613/02/2026
- Cross Site Scripting (XSS) vulnerability<= 2.13.404/02/2026
- Missing Authorization to Arbitrary Directory Listing vulnerability<= 2.13.331/12/2025
- Missing Authorization to Authenticated (Author+) Arbitrary Gallery Modification vulnerability<= 2.13.315/12/2025
- Authenticated (Author+) Arbitrary File Upload via Race Condition vulnerability2.13.1-2.13.203/12/2025
- Authenticated (Author+) Arbitrary File Deletion vulnerability2.13.1-2.13.203/12/2025
- Broken Access Control vulnerability<= 2.13.622/11/2025
- Improper Authorization to Authenticated (Author+) Arbitrary Image File Move vulnerability<= 2.12.2814/11/2025
- Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library vulnerability<= 2.10.103/04/2025
- Authenticated (Author+) Arbitrary File Upload vulnerability<= 2.11.1007/01/2025
- Incomplete Authorization via 'save_image' and 'save_images' vulnerability< 2.7.512/09/2023
- Unauth. Plugin Settings Change vulnerability<= 2.6.928/10/2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 2.6.606/06/2022
- Authenticated Stored Cross-Site Scripting (XSS) vulnerability<= 2.2.419/02/2020