Vulnerabilities / Portfolio Gallery – Image Gallery Plugin
Portfolio Gallery – Image Gallery Plugin vulnerabilities
Advisories WPSec published for Portfolio Filter Gallery – Photo Gallery. Other sources may list more. Its attack surface: Portfolio Gallery – Image Gallery Plugin on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0630 | Portfolio Gallery – Image Gallery Plugin <= 2.2.0 - Authenticated (Contributor+) Missing Authorization to Site-Wide Filter Management | Medium 4.3 | 2.2.1 |
| 2026-10-08 | WPSEC-2026-0629 | Portfolio Gallery – Image Gallery Plugin <= 2.2.0 - Authenticated (Contributor+) Missing Authorization to Media Library Image Upload | Medium 4.3 | 2.2.1 |
| 2026-10-08 | WPSEC-2026-0628 | Portfolio Gallery – Image Gallery Plugin <= 2.2.0 - Authenticated (Contributor+) Missing Authorization to Limited Attachment Deletion | Medium 4.3 | 2.2.1 |
| 2026-10-08 | WPSEC-2026-0627 | Portfolio Gallery – Image Gallery Plugin <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Title | Medium 6.4 | 2.2.1 |
| 2026-10-08 | WPSEC-2026-0626 | Portfolio Gallery – Image Gallery Plugin <= 2.2.0 - Authenticated (Contributor+) Insecure Direct Object Reference to Gallery Image Modification and Disclosure | Medium 5.4 | 2.2.1 |
License: CC BY 4.0