UnGallery
UnGallery has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2024; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Code Injection, behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.
2 independent researchers contributed these findings, one record each. UnGallery is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.1.42.
CVE-2024-3582UnGallery <= 2.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records

UnGallery
Author
mmond
UnGallery displays your directories of images as a browsable WordPress gallery. The advantage of UnGallery is there is there is no gallery management required in WordPress. You just point the plugin to a directory of photos and they are immediately viewable via an existing WordPress site. Any uploads, deletions, or edits you make to your photos and directory organization are automatically reflected in WordPress. If you’ve ever had to reorganize galleries after publishing, you know how inconvenient it is to return to a web tool to correct the paths, relink the thumbnails, update titles, etc. With UnGallery, you can restructure entire galleries, edit a dozen party pic red-eyes, rename an event or remove individual photos and each of these changes is automatically live in WordPress. Introduction and installation screencast Mark Reynolds http://markpreynolds.com Features Unlimited depth, breadth, and number of photos in library. My gallery has ~24,000 pictures and movies. Photos are managed outside of WordPress. Simply update a picture directory and UnGallery sees changes immediately. Galleries are searchable. This became very helpful as gallery volume grew to thousands. Default and configurable gallery titles Galleries can be set to hidden. These do not display in browsing, with access provided via direct link. Caching for faster page loads MP4 movies browsable within WordPress. Movies are linked and playable within browser. Image rotation support for orientation of jpegs with exif data Gallery hierarchy breadcrumb links Multiple gallery views, thumbnails, browsing navigation buttons, and slideshow. Dependencies Linux on the WordPress server PHP 5 Notes All image sizes including thumbnails, selected image view, movies, and column layout are customizable. To display a caption over a gallery, add a file named banner.txt to that directory with the desired text. The file can include plain text or html. If no banner.txt is found, the name of the directory used. To mark a gallery hidden, enter a name for hidden galleries on the UnGallery administration page. Any directories you create named “hidden”, will not be visible via normal gallery browsing. A direct link may be sent to provide access to hidden galleries. You can include UnGallery images in other areas of your WordPress site or other sites by embedding the URL from UnGallery into the external site. License The MIT License Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C