Global Gallery - WordPress Responsive Gallery

Global Gallery - WordPress Responsive Gallery has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Code Injection, Missing Authorization.

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, one record each.

01234567891011.02.2025Today11.02.20255.4Global Gallery - WordPress Responsive Gallery <= 9.1.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CVSS 5.4 · 11.02.202507.04.20256.1Global Gallery <= 8.8.0 - Reflected Cross-Site Scripting CVSS 6.1 · 07.04.202507.08.20255.3Global Gallery <= 9.2.3 - Missing Authorization CVSS 5.3 · 07.08.202519.08.20267.2Global Gallery - WordPress Responsive Gallery <= 11.1.2 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 19.08.2026

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage50%
Open

2

Fixed

2

Get automatic notifications for all Global Gallery - WordPress Responsive Gallery vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-73184

Global Gallery - WordPress Responsive Gallery <= 11.1.2 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C