Limb Gallery | Create Beautiful Image & Video Galleries

Limb Gallery | Create Beautiful Image & Video Galleries has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2024; 3 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Missing Authorization, Path Traversal.

3 of the records (60%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2024.

2 independent researchers contributed these findings, most of them (2) reported by stealthcopter.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage60%

Open

Fixed

Get automatic notifications for all Limb Gallery | Create Beautiful Image & Video Galleries vulnerabilities before they are exploited.

Most severe open issueCVSS 8.8CVE-2024-49260

WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

5 records


2024-10-14 00:00	WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Download Limb Gallery <= 1.5.7	`CVE-2024-49258`	6.5 Medium	stealthcopter	No
2024-10-14 00:00	WordPress Gallery Plugin – Limb Image Gallery <= 1.5.7 - Authenticated (Subscriber+) Arbitrary File Upload Limb Gallery <= 1.5.7	`CVE-2024-49260`	8.8 High	stealthcopter	No
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Limb Gallery 1.4.9 – 1.5.5	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Limb Gallery < 1.5.2	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes
2019-06-26 00:00	Limb Gallery – Create Beautiful Image & Video Galleries <= 1.3.2 - Cross-Site Scripting Limb Gallery < 1.4.0	`CVE-2019-14790`	6.1 Medium	Anonymous	Yes

Showing 1–5 of 5 reports