Vulnerabilities and security researches forgallery-for-ultimate-member gallery-for-ultimate-member
Direction: ascendingDec 13, 2024
Video & Photo Gallery for Ultimate Member # CVE-2024-12162
- CVE, Research URL
- Application
- Date
- Dec 12, 2024
- Research Description
- The Video & Photo Gallery for Ultimate Member plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
- Affected versions
-
Min -, max -.
- Status
-
vulnerable
Dec 18, 2024
Video & Photo Gallery for Ultimate Member # CVE-2024-54370
- CVE, Research URL
- Application
- Date
- Dec 16, 2024
- Research Description
- Unrestricted Upload of File with Dangerous Type vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member allows Upload a Web Shell to a Web Server.This issue affects Video & Photo Gallery for Ultimate Member: from n/a through 1.1.0.
- Affected versions
-
Min -, max -.
- Status
-
vulnerable
Feb 20, 2025
Video & Photo Gallery for Ultimate Member # CVE-2025-22672
- CVE, Research URL
- Application
- Date
- Mar 27, 2025
- Research Description
- Server-Side Request Forgery (SSRF) vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member allows Server Side Request Forgery.This issue affects Video & Photo Gallery for Ultimate Member: from n/a through 1.1.2.
- Affected versions
-
Min -, max -.
- Status
-
vulnerable
Apr 06, 2025
Video & Photo Gallery for Ultimate Member # CVE-2025-32121
- CVE, Research URL
- Application
- Date
- Apr 04, 2025
- Research Description
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member allows SQL Injection. This issue affects Video & Photo Gallery for Ultimate Member: from n/a through 1.1.3.
- Affected versions
-
Min -, max -.
- Status
-
vulnerable