Is "Gallery" safe?

Gallery: Plugin Details

---

Type:	Plugin
Author:	WebDorado
URL:	https://wordpress.org/plugins/photo-gallery/
Latest Version:	1.8.34

 

Gallery: Security Information

---

Insecure versions:	Up To 1.8.31
Known since:	2025-03-03 02:00:55

Insecure versions:	Up To 1.8.30
Known since:	2024-11-08 14:00:35

Insecure versions:	Up To 1.8.30
Known since:	2024-11-04 22:31:45

Insecure versions:	Up To 1.8.28
Known since:	2024-11-04 22:31:44

Insecure versions:	Up To 1.8.26
Known since:	2024-10-02 20:31:51

Insecure versions:	Up To 1.8.27
Known since:	2024-09-19 02:00:48

Insecure versions:	Up To 1.8.25
Known since:	2024-06-19 02:02:41

Insecure versions:	Up To 1.8.21
Known since:	2024-06-18 02:00:54

Insecure versions:	Up To 1.8.23
Known since:	2024-06-17 06:39:48

Insecure versions:	Up To 1.8.23
Known since:	2024-06-06 21:30:36

Insecure versions:	Up To 1.8.20
Known since:	2024-06-06 21:30:35

Insecure versions:	Up To 1.8.21
Known since:	2024-04-09 02:01:12

Insecure versions:	Up To 1.8.19
Known since:	2024-04-08 12:26:44

Insecure versions:	Up To 1.8.18
Known since:	2023-12-22 19:17:33

Insecure versions:	Up To 1.8.14
Known since:	2023-03-28 02:00:33

Insecure versions:	Up To 1.8.2
Known since:	2022-11-30 07:12:09

Insecure versions:	Up To 1.7.0
Known since:	2022-08-09 11:18:59

Insecure versions:	Up To 1.6.3
Known since:	2022-05-16 07:14:25

Insecure versions:	Up To 1.6.2
Known since:	2022-04-12 11:23:06

Insecure versions:	Up To 1.6.2
Known since:	2022-04-12 11:22:12

Insecure versions:	Up To 1.5.87
Known since:	2022-02-15 10:56:14

Insecure versions:	Up To 1.5.74
Known since:	2021-07-20 10:06:28

Insecure versions:	Up To 1.5.74
Known since:	2021-07-20 10:05:07

Insecure versions:	Up To 1.5.78
Known since:	2021-07-19 13:34:19

Insecure versions:	Up To 1.5.66
Known since:	2021-05-13 19:44:17

Insecure versions:	Up To 1.5.68
Known since:	2021-02-23 12:21:05
Description:	Multiple reflected cross-site scripting vulnerabilities in Photo Gallery (10Web Photo Gallery) plugin before 1.5.69 allows an attacker to inject arbitrary javascript to any site where plugin is used.

Insecure versions:	Up To 1.5.67
Known since:	2021-02-04 18:06:54

Insecure versions:	Up To 1.5.53
Known since:	2020-05-20 03:31:09
Description:	SQL injection in the Photo Gallery (10Web Photo Gallery) plugin before 1.5.55 exists via the frontend/models/model.php bwg_search_x parameter.

Insecure versions:	Up To 1.5.45
Known since:	2020-02-26 14:19:13

Insecure versions:	Up To 1.2.8
Known since:	2020-02-26 14:16:40

Insecure versions:	Up To 1.5.34
Known since:	2019-09-10 02:23:18

Insecure versions:	Up To 1.5.30
Known since:	2019-07-28 15:39:32

Insecure versions:	Up To 1.5.22
Known since:	2019-06-21 17:51:10

Insecure versions:	Up To 1.5.24
Known since:	2019-06-21 17:51:03

Insecure versions:	Up To 1.3.66
Known since:	2018-02-26 14:19:17

Insecure versions:	Up To 1.3.50
Known since:	2017-08-26 14:11:35

Insecure versions:	Up To 1.3.42
Known since:	2017-06-22 15:34:43

Insecure versions:	Up To 1.3.35
Known since:	2017-05-06 13:17:03

Insecure versions:	Up To 1.1.30
Known since:	2015-11-25 04:40:53

Insecure versions:	Up To 1.1.30
Known since:	2015-11-25 04:40:53

 

Gallery: Safety Recommendations

---

We have rated Gallery as Good (current version safe) which means that we have found vulnerabilities in older versions.

We recommend that you only use the latest version of Gallery.

Gallery: Keeping Safe

---

If you're running a business, ecommerce, news, or other critical website, Jetpack also provides additional indispensable services:

• Automated Backups
  Full backup of your entire site with unlimited storage space.
• Restores & Migrations
  Restore or migrate your site from a backup with one click.
• Security Scanning
  Regular, automated scans of your site for malware, threats, and hacks.
• Expert Support
  Fast, priority support for any WordPress security issue.

Choose Your Plan