Photo Gallery by 10Web – Mobile-Friendly Image Gallery

Explore Photo Gallery by 10Web – Mobile-Friendly Image Gallery vulnerabilities across all versions. Currently tracking 65 known vulnerabilities, including severity, impact, and patch status.

01234567891030.01.2014Today07.05.20148.8Photo Gallery by 10Web <= 1.2.41 - Cross-Site Request Forgery CVSS 8.8 · 07.05.201401.10.20143.1Photo Gallery by 10Web <= 1.1.30 - Reflected Cross-Site Scripting CVSS 3.1 · 01.10.201412.01.20159.8Photo Gallery by 10Web <= 1.2.7 - Unauthenticated Blind SQL Injection via order_by Parameter CVSS 9.8 · 12.01.201523.01.20158.8Photo Gallery by 10Web <= 1.2.10 - Authenticated SQL Injection via asc_or_desc Parameter CVSS 8.8 · 23.01.201528.01.20155.4Photo Gallery by 10Web <= 1.2.10 - Authenticated Cross-Site Scripting CVSS 5.4 · 28.01.201512.02.20158.8Photo Gallery by 10Web <= 1.2.5 - Unrestricted File Upload CVSS 8.8 · 12.02.201513.03.20155.4Photo Gallery by 10Web <= 1.2.12 - Authenticated Cross-Site Scripting CVSS 5.4 · 13.03.201502.05.20178.8Photo Gallery by 10Web <= 1.3.37 - Authenticated SQL Injection CVSS 8.8 · 02.05.201716.06.20174.1Photo Gallery by 10Web < 1.3.43 - Authenticated Path Traversal CVSS 4.1 · 16.06.201720.08.20177.2Photo Gallery by 10Web <= 1.3.50 - Authenticated SQL Injection via tag_id Parameter CVSS 7.2 · 20.08.201714.12.20176.1Photo Gallery by 10Web <= 1.3.66 - Cross-Site Scripting CVSS 6.1 · 14.12.201713.05.20195.4Photo Gallery by 10Web <= 1.5.22 - Authenticated Cross-Site Scripting CVSS 5.4 · 13.05.201915.05.20194.9Photo Gallery by 10Web <= 1.5.24 - Authenticated Local File Inclusion CVSS 4.9 · 15.05.201926.07.20199.8Photo Gallery by 10Web <= 1.5.30 - SQL Injection CVSS 9.8 · 26.07.201908.09.20196.1Photo Gallery by 10Web <= 1.5.34 - Cross-Site Scripting CVSS 6.1 · 08.09.20196.1Photo Gallery by 10Web <= 1.5.34 - Cross-Site Scripting CVSS 6.1 · 08.09.20199.8Photo Gallery by 10Web <= 1.5.34 - SQL Injection CVSS 9.8 · 08.09.201925.02.20205.5Photo Gallery by 10Web <= 1.5.45 - Multiple Cross-Site Scripting Issues CVSS 5.5 · 25.02.202015.05.20209.8Photo Gallery by 10Web <= 1.5.54 - SQL Injection via bwg_search_x Parameter CVSS 9.8 · 15.05.202003.02.20216.1Photo Gallery <= 1.5.67 - Reflected Cross-Site Scripting CVSS 6.1 · 03.02.202123.02.20216.1Photo Gallery by 10Web <= 1.5.68 - Cross-Site Scripting CVSS 6.1 · 23.02.202119.04.20216.1Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting <= 1.5.68 - Reflected Cross-Site Scripting CVSS 6.1 · 19.04.20216.1Photo Gallery <= 1.5.68 - Multiple Reflected Cross-Site Scripting CVSS 6.1 · 19.04.20216.1Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.5.68 - Reflected Cross-Site Scripting CVSS 6.1 · 19.04.202112.05.20214.8Photo Gallery <= 1.5.66 - Authenticated Stored Cross-Site Scripting via Gallery Title CVSS 4.8 · 12.05.202118.07.20216.1Photo Gallery <= 1.5.74 - Stored Cross-Site Scripting via Uploaded SVG CVSS 6.1 · 18.07.20214.9Photo Gallery <= 1.5.74 - File Upload Path Traversal CVSS 4.9 · 18.07.202119.07.20216.4Photo Gallery by 10Web <= 1.5.78 - Stored Cross-Site Scripting via Uploaded SVG CVSS 6.4 · 19.07.202115.02.20229.8Photo Gallery by 10Web <= 1.5.87 - Unauthenticated SQL Injection via bwg_tag_id_bwg_thumbnails_0 Parameter CVSS 9.8 · 15.02.202211.04.20228.8Photo Gallery by 10Web <= 1.6.2 - SQL Injection CVSS 8.8 · 11.04.20226.1Photo Gallery by 10Web <= 1.6.2 - Cross-Site Scripting CVSS 6.1 · 11.04.202216.05.20225.5Photo Gallery by 10Web <= 1.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 5.5 · 16.05.202216.06.20226.1Photo Gallery by 10Web <= 1.6.6 - Reflected Cross-Site Scripting CVSS 6.1 · 16.06.202228.06.20226.1Photo Gallery by 10Web <= 1.6.7 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 6.1 · 28.06.202201.07.20225.5Photo Gallery by 10Web <= 1.6.8 - Authenticated (Admin+) Cross-Site Scripting CVSS 5.5 · 01.07.202210.08.20226.1Photo Gallery <= 1.7.0 - Reflected Cross-Site Scripting CVSS 6.1 · 10.08.202203.11.20226.1Photo Gallery by 10Web <= 1.8.0 - Reflected Cross-Site Scripting CVSS 6.1 · 03.11.202226.11.20225.4Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.7 - Open Redirect CVSS 5.4 · 26.11.202228.11.20226.1Photo Gallery <= 1.8.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVSS 6.1 · 28.11.202221.03.20234.9Photo Gallery by 10Web <= 1.8.14 - Authenticated (Administrator+) Directory Traversal CVSS 4.9 · 21.03.202302.06.20234.3Photo Gallery <= 1.8.15 - Missing Authorization CVSS 4.3 · 02.06.202321.12.20234.4Photo Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget CVSS 4.4 · 21.12.202319.01.20249.1Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename CVSS 9.1 · 19.01.202426.03.20246.1Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'thumb_url' CVSS 6.1 · 26.03.20246.1Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'image_url' CVSS 6.1 · 26.03.20246.1Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'current_url' CVSS 6.1 · 26.03.20246.1Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'image_id' CVSS 6.1 · 26.03.202405.04.20245.5Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG CVSS 5.5 · 05.04.202425.04.20245.3Photo Gallery by 10Web <= 1.8.20 - Missing Authorization CVSS 5.3 · 25.04.202427.05.20244.3Photo Gallery by 10Web <= 1.8.25 - Missing Authorization to Notice Dismissal CVSS 4.3 · 27.05.202406.06.20246.4Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG CVSS 6.4 · 06.06.20246.8Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function CVSS 6.8 · 06.06.202423.09.20244.4Photo Gallery by 10Web <= 1.8.27 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 23.09.202403.10.20244.4Photo Gallery by 10Web <= 1.8.28 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 03.10.202404.11.20244.4Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 04.11.202414.11.20244.4Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.30 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 14.11.202402.03.20254.4Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.32 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 02.03.202510.03.20256.1Photo Gallery by 10Web <= 1.8.33 - Unauthenticated Stored Cross-Site Scripting CVSS 6.1 · 10.03.202511.04.20256.1Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter CVSS 6.1 · 11.04.202525.12.20254.4Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.38 - Authenticated (Editor+) Stored Cross-Site Scripting CVSS 4.4 · 25.12.202521.01.20265.3Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion CVSS 5.3 · 21.01.202608.02.20264.3Photo Gallery by 10Web <= 1.8.37 - Cross-Site Request Forgery CVSS 4.3 · 08.02.202627.05.20266.5Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute CVSS 6.5 · 27.05.202604.06.20266.5Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.41 - Authenticated (Contributor+) SQL Injection CVSS 6.5 · 04.06.202605.06.20266.5Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter CVSS 6.5 · 05.06.2026

Strategic Overview

Avg CVSSMedium
6.2/ 10
Patch Coverage100%
Open

0

Fixed

65

Get automatic notifications for all Photo Gallery by 10Web – Mobile-Friendly Image Gallery vulnerabilities before they are exploited.

Vulnerability Records

65 records
2026-06-05 15:34CVE-2026-9829
6.5
Medium
Jonah Burgess (CryptoCat)Yes
2026-06-04 00:00CVE-2026-49771
6.5
Medium
darooYes
2026-05-27 19:36CVE-2026-7048
6.5
Medium
Or BenitYes
2026-02-08 00:00CVE-2026-32330
4.3
Medium
Sandeep VYes
2026-01-21 10:40CVE-2026-1036
5.3
Medium
Moose LoveYes
2025-12-25 00:00CVE-2026-27360
4.4
Medium
TabulraYes
2025-04-11 00:00CVE-2025-2269
6.1
Medium
Ivan KuzymchakYes
2025-03-10 00:00CVE-2025-0613
6.1
Medium
stealthcopterYes
2025-03-02 00:00CVE-2024-13124
4.4
Medium
Dmitrii IgnatyevYes
2024-11-14 00:00CVE-2024-10704
4.4
Medium
Dmitrii IgnatyevYes
Showing 1–10 of 65 reports
Photo Gallery by 10Web &#8211; Mobile-Friendly Image Gallery banner
Latestv1.8.42

Photo Gallery by 10Web &#8211; Mobile-Friendly Image Gallery

10Web

Author

10Web

4.5(1,580)
90/100
Last Updated
2026-05-29 (2mo ago)
Active Installs
100,000+
Downloads
19,779,563
Requires WP
4.6+
Requires PHP
0+
Tested up to
WP 7.0.2
Created
2014-01-30 (13y ago)

Photo Gallery is the leading plugin for building beautiful mobile-friendly galleries in a few minutes. Useful Links: Live Demo Premium Photo Gallery by 10Web Special Offer for all Premium Plugins If you’re looking for a user friendly and feature rich plugin to add responsive galleries and albums to your website, Photo Gallery plugin can be the best option for you. It’s simple to use yet packed with powerful functionality, allowing you to create anything from simple to complex photo galleries. Photo Gallery comes packed with stunning layout options, gallery and album views, multiple widgets and a number of extensions that take its functionality even further. WordPress Photo Gallery is a great choice for photography websites and blogs, as well as sites that want to have robust image galleries with easy navigation. Check the extensive feature list of the plugin bellow, have a look at the plugin demo and give it a try. Benefits Increased visitor engagement – Images and photos grab attention and make websites more engaging. Using images in your posts and pages will result in increased visitor engagement and can give a boost on your posts’ pageviews. Enhanced SEO – Adding relevant tags and metadata to the images can enhance your SEO and provide more visibility in relevant search results in Google. Better page navigation – Organized galleries and albums will make your website look more professional, easy to navigate and result in a better user experience. Modern web design – Relevant high-resolution photos displayed in beautiful layouts are an integral part of a well-designed website that gets results. Full Control – Plugin gives you flexibility in terms of the design and customization of your galleries. You’ll get full control over the style, optimization and display of visual content on your website. Support – Get timely and effective support to all its users. We keep standards high and response time low. What’s in it CUSTOMIZABLE VIEWS Photo Gallery provides a number of view options to organize your galleries and albums in beautiful views, including Slideshow, Thumbnails, Masonry, Image Browser, Extended and Compact Album, Blog Style, Mosaic. The layouts give you the flexibility to customize them to match your needs. UNLIMITED PHOTOS, GALLERIES AND ALBUMS Sounds great, right? With plugin you can have as many galleries and albums as you want, and stuff them with unlimited number of photos and videos. Kinda unlimited everything. POWERFUL LIGHTBOX You can display your media content in a responsive lightbox that comes with 15 slideshow effects, supports social sharing, full width view option, filmstrip, image commenting (Premium version), lightbox autoplay and many more options that make your lightbox look awesome. AUDIO AND VIDEO SUPPORT The Photo Gallery plugin allows you to include both videos and images within a single gallery. The WordPress Plugin supports YouTube, Vimeo, Instagram, Flickr or Dailymotion videos within Galleries. All you need to do is copy the URL of the video you want to include in the gallery plugin. It’s also possible to add audio tracks for the image slideshow. MULTIPLE WIDGETS There are four widgets in the gallery plugin: WordPress Standard Tag Cloud, Dynamic Tags Cloud (Premium version), Slideshow and Gallery widget. Use one of these widgets to display your albums on the sidebar areas of your website. IMAGE WATERMARKING AND RIGHT CLICK PROTECTION With watermarking feature of the Photo Gallery plugin you can add text or image watermarks on the photos in your galleries and albums, and protect them from illegal use. Right click protection will protect your images from unlawful distribution. PRELOADED THEMES The plugin comes with two default Themes. The themes are giving you the option to add new themes with custom styling, colors, layout settings, and image navigation options. SOCIAL SHARING You can allow users to share photos on Facebook, Twitter, Pinterest and Tumblr with social sharing buttons. ADD-ONS Photo Gallery comes with a number of add-ons that can help you import/export galleries and albums from one WordPress website to another. SETTINGS/CUSTOMIZATION *Some customizations described here are available in Premium version . Please refer to feature summary for additional info. Photo Gallery allows you to create unlimited galleries and organize them into different photo albums providing detailed gallery descriptions and tags.The plugin supports both image and video content. Adding photos and videos to the galleries from the WordPress dashboard is simple and easy with its user-friendly admin panel. You’ll get all the tools you need to add and edit photos in the galleries.The file manager will help to rename, upload, remove, copy images and/or image directories with a few simple steps. Under the options (settings) tab in admin panel you’ll find an extensive list of settings for galleries, thumbnails, watermarking, social accounts and slideshow that you can configure based on your needs. Plugin features a powerful lightbox that supports filmstrip and image carousel display. Also, you can enable image comments options and show the comments of the images right in the lightbox. There is a dedicated section for lightbox settings where you can choose to enable/disable AddThis display, image download option, image count and other lightbox features. Under the social options tab you’ll find settings for the Instagram galleries, where you can specify Instagram feed auto update interval. With the available user roles you can choose who can add/edit galleries, images, albums and tags (Premium feature). Premium version adds Commenting possibility with Captcha protection Dynamic Tag Cloud widget with image tag cloud and text tag cloud options Add ons support. Possibility of changing the roles of who can edit the galleries/albums/images (Author/All Users) Photo Gallery Add-ons Google Photos Add-on – Link and display your Google Photos albums in one click. Export/Import Add-on Export/import galleries, albums and all related data from one WordPress site to another. IMPORTANT: If you think you found a bug in Photo Gallery or have any problem/question concerning the plugin, please check out Support Forum in our website.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C