Social Photo Gallery
Social Photo Gallery has one disclosed vulnerability in the WordSec catalog, all reported in 2019; it remains unpatched as of September 2026. Their average CVSS score is 7.8, and the most serious one scores 7.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Code Injection, behind 1 of the records (100%).
The one issue recorded for Social Photo Gallery has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2019.
All of these findings were reported by Prestigia Seguridad. Social Photo Gallery is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.8.30.
CVE-2019-14467Social Photo Gallery <= 1.0 - Remote Code Execution
Read the full analysisVulnerability Records

Social Photo Gallery
Author
Infoway LLC
This is a Polaroid image gallery plugins with the following features: * Create sub folders and upload photos to subfolder. Each subfolder represents a separate photo album * Must be possible to upload a cover photo for each album * Must be possible to add a date, title, and description for each album * Facility to add watermark to the images – watermark image must be able to be uploaded to the server. Must be possible to have a unique watermark for each album * Must be possible to add a caption for each image * On the front end, the cover photo for each album should be displayed on the main gallery page, like a set of polaroids, at different angles * Users should be able to view each album by clicking on the cover photo * Photos within albums should also be displayed like polaroids (i.e. like holiday snaps, not just in a straight line) * Photos can be enlarged by clicking on them * an icon or set of icons on each photo that allows you to share that photo on facebook and other social media sites or email it to someone It would be ideal if this photo gallery worked in a similar way to Yootheme’s WordPress widgetkit Gallery http://www.yootheme.com/demo/themes/wordpress/2012/sync/?page_id=112 (see polaroid example)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C