JetProductGallery

JetProductGallery has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 5 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 5 issues recorded for JetProductGallery has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (3) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all JetProductGallery vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3CVE-2023-48760

Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action

Read the full analysis

Vulnerability Records

5 records


2025-08-14 00:00	JetProductGallery <= 2.2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting JetProductGallery <= 2.2.0.2	`CVE-2025-54749`	6.4 Medium	stealthcopter	Yes
2025-03-29 00:00	JetProductGallery <= 2.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting JetProductGallery <= 2.1.22	`CVE-2025-31412`	6.4 Medium	stealthcopter	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery JetProductGallery <= 2.1.13.1	`CVE-2023-48762`	4.3 Medium	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action JetProductGallery <= 2.1.13.1	`CVE-2023-48760`	7.3 High	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization JetProductGallery <= 2.1.13.1	`CVE-2023-48761`	6.3 Medium	Rafie Muhammad	Yes

Showing 1–5 of 5 reports