Gallery Bank – WordPress Photo Gallery Plugin

Gallery Bank – WordPress Photo Gallery Plugin has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2013 and 2023; 7 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2014 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 6 of the records (67%). Other recurring categories include SQL Injection, Unrestricted Upload Of File With Dangerous Type.

7 of the records (78%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2022.

7 independent researchers contributed these findings, most of them (2) reported by James Hooker.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage78%

Open

Fixed

Get automatic notifications for all Gallery Bank – WordPress Photo Gallery Plugin vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4

Gallery Bank – WordPress Photo Gallery Plugin <= 4.0.50 - Stored Cross-Site Scripting via Media Upload

Read the full analysis

Vulnerability Records

9 records


2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Gallery Bank <= 4.0.18	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2022-06-09 00:00	Gallery Bank – WordPress Photo Gallery Plugin <= 4.0.50 - Stored Cross-Site Scripting via Media Upload Gallery Bank <= 4.0.50	`N/A`	6.4 Medium	Vishnupriya Ilango	No
2022-06-09 00:00	Gallery Bank – WordPress Photo Gallery Plugin <= 4.0.50 - Stored Cross-Site Scripting via Gallery Description Gallery Bank <= 4.0.50	`N/A`	6.4 Medium	Vishnupriya Ilango	No
2015-08-21 00:00	Gallery Bank – WordPress Photo Gallery Plugin <= 3.0.229 - SQL Injection Gallery Bank < 3.0.330	`N/A`	8.8 High	Marcin Probola	Yes
2015-02-21 00:00	Gallery Bank – WordPress Photo Gallery <= 3.0.101 - SQL Injection Gallery Bank <= 3.0.101	`N/A`	8.8 High	James Hooker	Yes
2014-11-25 00:00	Gallery Bank – WordPress Photo Gallery Plugin < 3.0.61 - Arbitrary File Upload Gallery Bank < 3.0.61	`N/A`	9.8 Critical	Shahab Shamsi (Mohit Amn Security Team)	Yes
2014-10-18 00:00	Gallery Bank – WordPress Photo Gallery Plugin < 3.0.70 - Reflected Cross-Site Scripting Gallery Bank < 3.0.70	`CVE-2014-8758`	6.1 Medium	James Hooker	Yes
2014-08-01 00:00	PrettyPhoto Library (Multiple Plugins and Themes) <= 3.1.4 - DOM Cross-Site Scripting Gallery Bank < 3.0.229	`CVE-2013-6837`	6.1 Medium	Anant Shrivastava (anantshri)	Yes
2013-10-28 00:00	Gallery Bank – WordPress Photo Gallery Plugin < 2.0.20 - Reflected Cross-Site Scripting Gallery Bank < 2.0.20	`N/A`	6.1 Medium	Sojobo Dev Team	Yes

Showing 1–9 of 9 reports