SimpLy Gallery

Explore SimpLy Gallery vulnerabilities across all versions. Currently tracking 12 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all SimpLy Gallery vulnerabilities before they are exploited.

Vulnerability Records

12 records


2026-07-10 14:09	Mixed Media Gallery Blocks <= 3.3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via sliderMaxHeight Block Attribute SimpLy Gallery <= 3.3.3.1	`CVE-2026-5743`	6.4 Medium	Muhammad Yudha - DJ	Yes
2026-04-30 17:17	Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter SimpLy Gallery <= 3.2.4.4	`CVE-2024-13362`	6.1 Medium	Asaf Mozes	Yes
2026-03-23 00:00	Mixed Media Gallery Blocks <= 3.3.2 - Authenticated (Contributor+) Remote Code Execution SimpLy Gallery <= 3.3.2	`CVE-2026-25345`	8.8 High	Drew Webber (mcdruid)	Yes
2025-12-12 15:46	Gallery Blocks with Lightbox <= 3.3.0 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Modification SimpLy Gallery <= 3.3.0	`CVE-2025-14288`	4.3 Medium	Karol	Yes
2025-10-26 00:00	SimpLy Gallery <= 3.3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting SimpLy Gallery <= 3.3.2.1	`CVE-2025-63052`	6.4 Medium	Peter Thaleikis	Yes
2025-04-04 00:00	Gallery Blocks with Lightbox <= 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting SimpLy Gallery <= 3.2.5	`CVE-2025-32176`	6.4 Medium	Peter Thaleikis	Yes
2024-11-21 17:21	Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.4.2 - Authenticated (Editor+) Stored Cross-Site Scripting SimpLy Gallery <= 3.2.4.2	`CVE-2024-10034`	5.5 Medium	SE-YEON HWANG	Yes
2024-06-27 20:19	Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via galleryID and className Parameters SimpLy Gallery <= 3.2.1	`CVE-2024-5424`	6.4 Medium	Webbernaut	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get SimpLy Gallery 1.8.4 – 3.1.4	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2023-03-01 00:00	Gallery Blocks with Lightbox <= 3.0.7 - Missing Authorization in pgc_sgb_action_wizard SimpLy Gallery <= 3.0.7	`CVE-2023-0441`	8.1 High	dc11	Yes

Showing 1–10 of 12 reports