10Web Photo Gallery by 10Web – Mobile-Friendly Image Gallery

• CVE-2026-18557 Medium 6.1 Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter 0.2%
• CVE-2026-92974 Medium 6.1 Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter 0.2%
• CVE-2026-85652 Medium 6.5 Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute 0.6%
• CVE-2026-86311 Medium 6.4 Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
• CVE-2026-9829 Medium 6.5 Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter 0.5%
• CVE-2026-7048 Medium 6.5 Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute 0.5%
• CVE-2026-1036 Medium 5.3 Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion 0.3%
• CVE-2025-2269 Medium 6.1 Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter 0.3%
• CVE-2024-9878 Medium 4.4 Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.5%
• CVE-2024-5481 Medium 6.8 Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function 0.7%
• CVE-2024-5426 Medium 6.4 Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG 0.3%
• CVE-2024-2296 Medium 5.5 Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG 0.4%
• CVE-2024-0221 Critical 9.1 Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename 1.3%
• CVE-2023-6924 Medium 4.4 Photo Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget 0.5%
• CVE-2021-24310 Unrated Photo Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery Title 1.1%