Gallery Styles – Sort & Style the Gallery Block (Exif, Hover, Duotone)
Gallery Styles – Sort & Style the Gallery Block (Exif, Hover, Duotone) has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Gallery Styles – Sort & Style the Gallery Block (Exif, Hover, Duotone) has a vendor fix available, so running the current release closes it.
All of these findings were reported by Peter Thaleikis. Gallery Styles – Sort & Style the Gallery Block (Exif, Hover, Duotone) is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-1783Gallery Styles <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Gallery Styles – Sort & Style the Gallery Block (Exif, Hover, Duotone)
Author
Daniel Floeter
Sorts the images of your image gallery by Exif date, title or filename, and adds hover styles, color and duotone filters to the WordPress gallery block. Features Animated, inside lines style Cross hover style Hero style, first image large Reverse layout style Disable captions Foreground-, background and text colorpicker Filter duotone, multiply, luminosity Font-size, font blend-mode Sort by: As uploaded, Media Id, Title, Filename, Exif created, WordPress date, WordPress modified Link to: Expand on click as default for new galleries (WordPress 6.4 and higher) Demo Please check out our demos: demo.tiptoppress.com/gallery-styles/ Tip Top Press We’re Tip Top Press and create Gutenberg Blocks for WordPress. If you want to know about what we’re working on and you are interested in backgrounds then you can read all newes storys on our blog. Contribute While using this plugin if you find any bug or any conflict, please submit an issue at Github (If possible with a pull request).
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C