GalleryCreator

Products

ProductCVEsExploitedLatest
SimpLy Gallery4–Jul 11, 2026
Mixed Media Gallery Blocks3–Dec 13, 2025

Exploited and recent CVEs

  • CVE-2026-5743 Medium 6.4 Mixed Media Gallery Blocks <= 3.3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via sliderMaxHeight Block Attribute 0.4%
  • CVE-2026-25345 Critical 9.9 WordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability 0.5%
  • CVE-2025-14288 Medium 4.3 Gallery Blocks with Lightbox <= 3.3.0 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Modification 0.2%
  • CVE-2025-63052 Medium 6.5 WordPress SimpLy Gallery plugin <= 3.3.2.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-32176 Medium 6.5 WordPress Gallery Blocks with Lightbox plugin <= 3.2.5 - Stored Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-10034 Medium 5.5 Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.4.2 - Authenticated (Editor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-5424 Medium 6.4 Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via galleryID and className Parameters 0.5%