ReFlex Gallery » WordPress Photo Gallery
ReFlex Gallery » WordPress Photo Gallery has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2013 and 2021; all 4 are fixed as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 0 high.
The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.
Every one of the 4 issues recorded for ReFlex Gallery » WordPress Photo Gallery has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (2) reported by Sammy Forgit. ReFlex Gallery » WordPress Photo Gallery is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.7.17.
CVE-2015-4133ReFlex Gallery » WordPress Photo Gallery < 3.1.4 - Arbitrary File Upload
Read the full analysisVulnerability Records
ReFlex Gallery » WordPress Photo Gallery
Author
hahncgdev
WordPress Photo Gallery ReFlex Gallery is a fully responsive WordPress photo gallery plugin that is actually two galleries in one. ReFlex Gallery uses a FlexSlider style gallery for all mobile devices with a screen width of 480 pixels or less and dynamically creates prettyPhoto style galleries for all screen widths above 480 pixels. ReFlex Gallery allows for multiple galleries per page. Photo Gallery features Responsive photo galleries (works on smart devices) Two gallery types in one (prettyPhoto modal pop-up and FlexSlider for mobile devices) Include multiple galleries on a page or post Set the ‘sort order’ of images in the galleries WordPress ShortCodes for easy content integration And much more… German translation added (Deutsch Übersetzung hinzugefügt) Portuguese translation added (Tradução em português adicionado) WordPress Plugins Be sure to also check out these other plugins for WordPress: WP Easy Gallery, WP Easy Gallery Pro, Custom Post Donations Pro, Custom Post Donations, WP Translate, WP Translate Pro, Email Obfuscate, Prosperity. Gallery Plugin License Notice The developer of this plugin is not in any way affiliated to the developer of the prettyPhoto jQuery plugin. prettyPhoto is being developed by Stephane Caron and licensed under the GPLv2 license. As the developer states, prettyPhoto is “totally free to use (…) in all projects, even commercial ones”. For more information on prettyPhoto please visit the project page: prettyPhoto project page FlexSlider is licensed by woothemes under the GPLv2 license. Please consider a donation to the author of prettyPhoto in order to support the project! Plugins for WordPress by HahnCreativeGroup.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C