Gallery Styles

Gallery Styles has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Gallery Styles has a vendor fix available, so running the current release closes it.

All of these findings were reported by Peter Thaleikis. Gallery Styles is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Gallery Styles vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-1783

Gallery Styles <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Gallery Styles banner
Latestv1.4.0

Gallery Styles

Daniel Floeter

Author

Daniel Floeter

0.0(0)
0/100
Last Updated
2026-08-29 (15d ago)
Active Installs
500+
Downloads
7,140
Requires WP
5.6+
Requires PHP
7.0.0+
Tested up to
WP 7.1
Created
2022-12-29 (4y ago)

Adds styles, image filters and sorting by images for the WordPress core/gallery. Features Animated, inside lines style Cross hover style Disable captions Foreground-, background and text colorpicker Filter duotone, multiply, luminosity Font-size, font blend-mode Sort by: As uploaded, Media Id, Title, Filename, Exif created, WordPress date, WordPress modified Link to: Expand on click as default for new galleries (WordPress 6.4 and higher) Demo Please check out our demos: demo.tiptoppress.com/gallery-styles/ Tip Top Press We’re Tip Top Press and create Gutenberg Blocks for WordPress. If you want to know about what we’re working on and you are interested in backgrounds then you can read all newes storys on our blog. Contribute While using this plugin if you find any bug or any conflict, please submit an issue at Github (If possible with a pull request).

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C