Gallery with thumbnail slider

Gallery with thumbnail slider has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. Gallery with thumbnail slider is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage50%
Open

1

Fixed

1

Get automatic notifications for all Gallery with thumbnail slider vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-5092

Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library

Read the full analysis

Vulnerability Records

2 records
Gallery with thumbnail slider banner
Latestv8.3.1

Gallery with thumbnail slider

Galaxy Weblinks

Author

Galaxy Weblinks

3.8(9)
76/100
Last Updated
2026-06-09 (3mo ago)
Active Installs
3,000+
Downloads
50,609
Requires WP
6.8+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2019-02-15 (8y ago)

The plugin is highly customizable. You can adjust size, style, timing, transitions, controls, lightbox effects, vertical gallery, carousal slider and more as per your needs. It also lets you batch upload images at once when you have a lot of images and not enough time. You have a host of functionalities to choose from: * Thumbnail slider * Lightbox Gallery/Slider * Vertical Gallery/Slider * Enable/Disable image Alt/Caption text * Pagination and navigation Switch * Slider loop Option * Add unlimited images in a slider * Pause interval timer * Slide autoplay and much more. Here’s a link to the demo and documentation for the plugin. This will help you learn more about its features and how to use it. Demo | Documentation For any feedback or queries regarding this plugin, please contact our Support team.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C