Powerplay Gallery

Powerplay Gallery has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2015; 1 is fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 8.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 3 critical and 0 high. 2015 was the busiest year with 3 disclosures.

The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 2 of the records (50%). Other recurring categories include Cross-Site Scripting, SQL Injection.

1 of the records (25%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2015.

2 independent researchers contributed these findings, most of them (3) reported by Larry W. Cashdollar.

Strategic Overview

Avg CVSSHigh

8.9/ 10

Patch Coverage25%

Open

Fixed

Get automatic notifications for all Powerplay Gallery vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2015-5681

Powerplay Gallery <= 3.3 - Arbitrary File Upload

Read the full analysis

Vulnerability Records

4 records


2015-07-01 00:00	Powerplay Gallery <= 3.3 - Arbitrary File Upload Powerplay Gallery <= 3.3	`CVE-2015-5681`	9.8 Critical	Larry W. Cashdollar	No
2015-07-01 00:00	Powerplay Gallery <= 3.3 - Arbitrary File Upload Powerplay Gallery <= 3.3	`CVE-2015-5682`	9.8 Critical	Larry W. Cashdollar	No
2015-06-27 00:00	Powerplay Gallery <= 3.3 - SQL Injection Powerplay Gallery <= 3.3	`CVE-2015-5599`	9.8 Critical	Larry W. Cashdollar	No
2012-11-09 20:12	SWFUpload <= 2.2.0.1 - Cross-Site Scripting Powerplay Gallery < 3.2	`CVE-2012-3414`	6.1 Medium	Neal Poole	Yes

Showing 1–4 of 4 reports