origincode
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Product Catalog | 1 | – | Mar 26, 2025 |
| Video Gallery – Vimeo and YouTube Gallery | 1 | – | Aug 28, 2025 |
| WordPress Photo Gallery – Image Gallery | 1 | – | Jul 1, 2023 |
Exploited and recent CVEs
- CVE-2025-48349 WordPress Video Gallery – Vimeo and YouTube Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-30524 WordPress Product Catalog plugin <= 1.0.4 - SQL Injection vulnerability 0.6%
- CVE-2021-4384 WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery Bypass 0.4%