Vulnerabilities and security researches forgallery-with-thumbnail-slider gallery-with-thumbnail-slider

Jun 07, 2024

CVE, Research URL: CVE-2022-42485
Home page URL: Security reports for Gallery with thumbnail slider
Application: Gallery with thumbnail slider
Date: Mar 21, 2023
Research Description: Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin <= 6.0 versions.
Affected versions: max 6.1.
Status: vulnerable

Apr 24, 2026

CVE, Research URL: CVE-2025-5092
Home page URL: Security reports for Gallery with thumbnail slider
Application: Gallery with thumbnail slider
Date: Nov 20, 2025
Research Description: Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 7.8.
Status: vulnerable