Vulnerabilities and security researches forinsta-gallery insta-gallery

Oct 25, 2026

CVE, Research URL: CVE-2026-114705
Home page URL: Security reports for Social Feed Gallery
Application: Social Feed Gallery
Date: Oct 24, 2026
Research Description: Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Feed Gallery: from n/a through 5.0.13.
Affected versions: max 5.0.13.
Status: vulnerable

Dec 11, 2025

CVE, Research URL: CVE-2025-10637
Home page URL: Security reports for Social Feed Gallery
Application: Social Feed Gallery
Date: Oct 25, 2025
Research Description: The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagram profile and media data from any account the site owner connected to their site.
Affected versions: max 4.9.3.
Status: vulnerable

Aug 05, 2024

CVE, Research URL: CVE-2024-39640
Home page URL: Security reports for Social Feed Gallery
Application: Social Feed Gallery
Date: Nov 01, 2024
Research Description: Missing Authorization vulnerability in QuadLayers WP Social Feed Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Feed Gallery: from n/a through 4.3.9.
Affected versions: max 4.4.0.
Status: vulnerable

Jun 07, 2024

CVE, Research URL: CVE-2019-15779
Home page URL: Security reports for Social Feed Gallery
Application: Social Feed Gallery
Date: Aug 29, 2019
Research Description: The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.
Affected versions: max 2.4.8.
Status: vulnerable