Approved changes feed: RSS · Atom

cpe:2.3:a:contest_gallery:contest_gallery:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorContest Gallery (63c2cca9-c12d-54f8-83db-df6d5234d9bb)
ProductContest Gallery (21c5a454-68c6-5ff6-90e8-49b10d4fb3fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpplugins/contest-gallery purl2cpe 2026-06-01 10:14:55.607262

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-22693 vulnerable 2026-06-08 07:10:54.636730 WordPress Contest Gallery plugin <= 25.1.0 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows SQL Injection.This issue affects Contest Gallery: from n/a through <= 25.1.0.
Published: 2025-02-03T14:23:52.476Z
Updated: 2026-04-28T16:11:04.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56237 vulnerable 2026-06-08 06:54:17.588834 WordPress Contest Gallery plugin <= 24.0.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through <= 24.0.3.
Published: 2025-01-02T12:01:15.266Z
Updated: 2026-04-28T16:10:55.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39631 vulnerable 2026-06-08 06:41:51.249149 WordPress Contest Gallery plugin <= 23.1.2 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 23.1.2.
Published: 2024-08-01T22:27:45.887Z
Updated: 2026-04-28T16:10:07.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32778 vulnerable 2026-06-08 06:37:23.969569 WordPress Contest Gallery plugin <= 21.3.4 - Arbitrary File Deletion vulnerability
HIGH (8.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4.
Published: 2024-06-09T13:08:35.221Z
Updated: 2026-04-28T16:09:40.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28784 vulnerable 2026-06-08 06:02:35.735124 WordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contest Gallery plugin <= 21.1.2 versions.
Published: 2023-06-22T11:21:07.805Z
Updated: 2026-04-28T16:08:16.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45848 vulnerable 2026-06-08 05:50:37.326455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.