Vulnerabilities / WoowGallery
WoowGallery vulnerabilities
Advisories WPSec published for WoowGallery. Other sources may list more. Its attack surface: WoowGallery on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-23 | WPSEC-2026-1534 | WoowGallery <= 1.2.5 - Reflected Cross-Site Scripting via Pricing Page Query Parameters | Medium 6.1 | 1.2.6 |
| 2026-10-23 | WPSEC-2026-1533 | WoowGallery <= 1.2.5 - Unauthenticated Content Injection via Freemius SDK 'purchase_completed' Admin Notice | Low 3.7 | 1.2.6 |
| 2026-10-23 | WPSEC-2026-1532 | WoowGallery <= 1.2.5 - Authenticated (Subscriber+) Missing Authorization to Freemius Account Connection | Medium 4.3 | 1.2.6 |
License: CC BY 4.0