Gallery – Image and Video Gallery with Thumbnails

Gallery – Image and Video Gallery with Thumbnails has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2024; 3 are fixed and 6 remain unpatched as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 9.9 out of 10. Severity breakdown: 2 critical and 1 high. 2023 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (56%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF).

3 of the records (33%) have a vendor fix, while 6 remain unpatched. The oldest unresolved one dates back to 2023.

5 independent researchers contributed these findings, most of them (3) reported by LVT-tholv2k.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage33%

Open

Fixed

Get automatic notifications for all Gallery – Image and Video Gallery with Thumbnails vulnerabilities before they are exploited.

Most severe open issueCVSS 9.9CVE-2024-35750

Gallery – Image and Video Gallery with Thumbnails <= 2.0.3 - Authenticated (Contributor+) SQL Injection

Read the full analysis

Vulnerability Records

9 records


2024-06-06 00:00	Gallery – Image and Video Gallery with Thumbnails <= 2.0.3 - Authenticated (Contributor+) SQL Injection Gallery <= 2.0.3	`CVE-2024-35750`	9.9 Critical	LVT-tholv2k	No
2024-03-29 00:00	Responsive Image Gallery, Gallery Album <= 2.0.3 - Reflected Cross-Site Scripting Gallery <= 2.0.3	`CVE-2024-30550`	6.1 Medium	LVT-tholv2k	No
2024-03-29 00:00	Responsive Image Gallery, Gallery Album <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Gallery <= 2.0.3	`CVE-2024-31120`	6.4 Medium	LVT-tholv2k	No
2023-10-11 00:00	Responsive Image Gallery, Gallery Album <= 2.0.3 - Cross-Site Request Forgery Gallery <= 2.0.3	`CVE-2023-45629`	5.4 Medium	thiennv	No
2023-10-11 00:00	Responsive Image Gallery, Gallery Album <= 2.0.3 - Missing Authorization via Multiple AJAX Actions Gallery <= 2.0.3	`CVE-2023-45631`	5.4 Medium	thiennv	No
2023-10-11 00:00	Responsive Image Gallery, Gallery Album <= 2.0.3 - Unauthenticated Cross-Site Scripting Gallery <= 2.0.3	`CVE-2023-45630`	6.1 Medium	thiennv	No
2023-02-03 00:00	Gallery – Image and Video Gallery with Thumbnails <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting Gallery <= 2.0.1	`CVE-2022-47603`	7.2 High	minhtuanact	Yes
2022-06-13 00:00	Gallery – Image and Video Gallery with Thumbnails <= 1.9.9 - Reflected Cross-Site Scripting Gallery <= 1.9.9	`CVE-2022-1946`	6.1 Medium	cydave	Yes
2017-09-22 00:00	Gallery – Image and Video Gallery with Thumbnails < 1.2.1 - SQL Injection Gallery < 1.2.1	`CVE-2017-14125`	9.8 Critical	Manuel Garcia Cardenas	Yes

Showing 1–9 of 9 reports