Vulnerabilities / Picture Gallery – Frontend Image Uploads, AJAX Photo List
Picture Gallery – Frontend Image Uploads, AJAX Photo List vulnerabilities
Advisories WPSec published for Picture Gallery – Frontend Image Uploads, AJAX Photo List. Other sources may list more. Its attack surface: Picture Gallery – Frontend Image Uploads, AJAX Photo List on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1404 | Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute | Medium 6.4 | 1.7.21 |
| 2026-10-21 | WPSEC-2026-1403 | Picture Gallery – Frontend Image Uploads, AJAX Photo List <= 1.6.2 - Authenticated (Contributor+) Path Traversal to Arbitrary File Read via 'importFiles' Parameter | Medium 6.5 | 1.7.21 |
License: CC BY 4.0