Gallery PhotoBlocks

Gallery PhotoBlocks has 15 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 15 are fixed as of October 2026. Their average CVSS score is 6.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 6 disclosures.

The most common weakness is Cross-Site Scripting, behind 12 of the records (80%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 15 issues recorded for Gallery PhotoBlocks has a vendor fix available, so running the current release closes all known holes.

10 independent researchers contributed these findings, most of them (2) reported by Ngo Van Thien. Gallery PhotoBlocks is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Gallery PhotoBlocks vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2022-36292

Gallery PhotoBlocks <= 1.2.8 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

15 records


2026-10-26 17:29	Gallery PhotoBlocks <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Gallery PhotoBlocks <= 1.3.7	`CVE-2026-116408`	6.4 Medium	Supakiad S.	Yes
2026-10-26 16:43	Gallery PhotoBlocks <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Gallery PhotoBlocks <= 1.3.7	`CVE-2026-114710`	6.4 Medium	Oly Hossen	Yes
2026-10-08 00:00	Gallery PhotoBlocks <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Gallery PhotoBlocks <= 1.3.5	`CVE-2026-107323`	6.4 Medium	Andy Urlep	Yes
2026-09-02 00:00	Gallery PhotoBlocks <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Gallery PhotoBlocks <= 1.3.4	`CVE-2026-84781`	6.4 Medium	V1T	Yes
2026-07-27 00:00	Gallery PhotoBlocks <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Gallery PhotoBlocks <= 1.3.3	`CVE-2026-66448`	6.4 Medium	Muhammad Sharief	Yes
2026-01-26 00:00	Gallery PhotoBlocks <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Gallery PhotoBlocks <= 1.3.2	`CVE-2026-24389`	6.4 Medium	johska	Yes
2025-09-03 00:00	Gallery PhotoBlocks <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Gallery PhotoBlocks <= 1.3.1	`CVE-2025-58610`	6.4 Medium	theviper17y	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Gallery PhotoBlocks 1.0.0 – 1.2.8	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2022-08-17 00:00	Gallery PhotoBlocks <= 1.2.8 - Missing Authorization Checks Gallery PhotoBlocks <= 1.2.8	`N/A`	5.4 Medium	Anonymous	Yes
2022-08-10 00:00	Gallery PhotoBlocks <= 1.2.8 - Cross-Site Request Forgery Gallery PhotoBlocks <= 1.2.8	`CVE-2022-36292`	8.8 High	Ngo Van Thien	Yes

Showing 1–10 of 15 reports

Latestv1.3.8

Gallery PhotoBlocks

Author

WP Chill

5.0(76)

100/100

Last Updated

2026-10-23 (5d ago)

Active Installs

3,000+

Downloads

136,304

Requires WP

5.2+

Requires PHP

5.6+

Tested up to

WP 7.1.3

Created

2018-02-28 (9y ago)

This is an image and photo gallery plugin perfect to make galleries with justified edges! You can zoom the images thanks to a fast lightbox. Add special effects to your grid gallery. Use our builder to create justified galleries. Drag and drop functionality Handy builder PhotoBlocks Grid Builder is the stellar feature that makes PhotoBlocks special and different from other galleries. With this tool you can design the layout of your gallery simply by dragging the images. You can make a gallery with images spanning on more columns or rows. Features Drag and drop builder to design custom layouts Pixel perfect justified gallery Lightbox to zoom photos Special effects on mouse hover Loading special effects Social sharing Captions with title and description Caption positioning Responsive and mobile ready SEO friendly Open videos on image click Open pages on image click Fast loading gallery Full width galleries Shuffle images Jetpack’s Photon compatibility for high speed Post galleries (premium feature) CDN support for even faster image loading (premium feature) Text blocks (premium feature) Filters/Categories (premium feature) Additional hover effects (premium feature) Additional loading effects (premium feature) Additional captions layouts (premium feature) Handle shortcodes inside blocks (premium feature) Uses wedding album photo gallery designer portfolio photo gallery photography portfolio photo gallery products showcase photo gallery

View on WordPress.org