Gallery Photoblocks

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-37407 MEDIUM This Month

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS WordPress Gallery Photoblocks

NVD

CVSS 3.1

5.4

EPSS

0.5%

CVE-2022-36292 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF WordPress Gallery Photoblocks

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2019-15829 MEDIUM POC This Month

The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS WordPress PHP Gallery Photoblocks

NVD

CVSS 3.0

4.8

EPSS

1.3%

CVE-2022-37407

EPSS 1% CVSS 5.4

MEDIUM This Month

XSS WordPress Gallery Photoblocks

NVD

CVE-2022-36292

EPSS 0% CVSS 8.8

HIGH This Week

CSRF WordPress Gallery Photoblocks

NVD

CVE-2019-15829

EPSS 1% CVSS 4.8

MEDIUM POC This Month

XSS WordPress PHP +1

NVD