ImagePress – Front-End Photo Uploads & Member Galleries

ImagePress – Front-End Photo Uploads & Member Galleries has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 3 are fixed as of October 2026. Their average CVSS score is 4.3, and the most serious one scores 4.4 out of 10. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 3 issues recorded for ImagePress – Front-End Photo Uploads & Member Galleries has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by Michelle Porter. ImagePress – Front-End Photo Uploads & Member Galleries is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all ImagePress – Front-End Photo Uploads & Member Galleries vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2024-9776

ImagePress - Image Gallery <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings

Read the full analysis

Vulnerability Records

3 records


2024-10-11 16:56	ImagePress - Image Gallery <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings ImagePress <= 1.2.2	`CVE-2024-9776`	4.4 Medium	家桥王	Yes
2024-10-11 00:00	ImagePress – Image Gallery <= 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update ImagePress <= 1.2.2	`CVE-2024-9778`	4.3 Medium	Michelle Porter	Yes
2024-10-11 00:00	ImagePress - Image Gallery <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Post Title Update ImagePress <= 1.2.2	`CVE-2024-9824`	4.3 Medium	Michelle Porter	Yes

Showing 1–3 of 3 reports

Latestv1.4.0

ImagePress – Front-End Photo Uploads & Member Galleries

Author

Ciprian Popescu

5.0(5)

100/100

Last Updated

2026-10-09 (19d ago)

Active Installs

200+

Downloads

25,153

Requires WP

6.3+

Requires PHP

7.0+

Tested up to

WP 7.1.3

Created

2011-01-11 (16y ago)

ImagePress is a WordPress image gallery plugin for sites that want to collect and display community photos. Visitors can upload images, add a short description, and organize their work into galleries. Use it for member galleries, photography communities, portfolios, or any site where people should be able to share images from the front end. ImagePress includes: Front-end image uploading and editing, with drag and drop Moderation queue and email notifications Upload limits per user, spam protection (honeypot and rate limit) and server-side file checks Separate, sortable, and filterable galleries in a CSS grid or masonry layout (no jQuery) A shortcode generator in Settings Author profiles and portfolios A responsive layout that works with your WordPress theme Phone photos just work: WordPress 7.1 converts HEIC and AVIF images in the browser before they are uploaded. Explore more WordPress Plugins. Check out the ImagePress PRO edition for advanced image variants, detail shots, progress shots, and front-end account features. View a free demo or learn about ImagePress PRO. If ImagePress has helped your site, please leave a review on WordPress.org. From the same author Active Contacts – WordPress CRM & Follow-up Plugin LazyClone – Copy a WordPress Site Without FTP Lighthouse – WordPress Performance & Speed Optimization Plugin Active Analytics – Privacy-Friendly WordPress Analytics Plugin ImagePress – WordPress Image Gallery & Community Photo Plugin eCards – WordPress eCard Plugin with Email Designer Repeater for Gravity Forms – Repeater Field Add-on Fixtures & Results – WordPress Sports League & GAA Club Plugin WP Google Consent Platform (GCP)

View on WordPress.org