WordPress Gmedia Photo Gallery plugin <= 1.25.0 - Cross Site Request Forgery (CSRF) vulnerability
Gmedia Photo Gallery
Minimum safe version
1.24.0
Update to 1.24.0 or later to address 13 fixable vulnerabilities
Latest available1.25.0 ✓⚠ 1 vulnerability has no fix
N/A Unfixed
2025-12-31≤ 1.25.0
High 7.5
2025-06-27< 1.24.0
CVE-2025-53257
N/A
< 1.2.2
Gmedia Gallery 1.2.1 - Shell Upload
N/A
< 1.18.5
Gmedia Photo Gallery < 1.18.5 - Multiple Cross-Site Scripting (XSS)
N/A
2014-05-25< 0.9.4
Gmedia Photo Gallery < 0.9.4 - Reflected Cross-Site Scripting
N/A
2014-08-02< 1.2.2
Gmedia Photo Gallery < 1.2.2 - Arbitrary File Upload
N/A
2015-05-27< 1.6.5
Gmedia Photo Gallery <= 1.6.4 - Local File Inclusion
N/A
2015-05-27< 1.6.5
Gmedia Photo Gallery <= 1.6.4 - Denial of Service
N/A
2015-05-27< 1.6.5
Gmedia Photo Gallery <= 1.6.4 - Open Proxy
N/A
2015-05-27< 1.6.5
Gmedia Photo Gallery <= 1.6.4 - Cross-Site Scripting
N/A
2020-04-27< 1.18.5
Gmedia Photo Gallery <= 1.18.4 - Cross-Site Scripting
N/A
2014-09-17< 1.2.2
WordPress Gmedia Gallery Plugin 1.2.1 - Shell Upload
N/A
2020-04-28< 1.18.5
WordPress Gmedia Photo Gallery plugin <= 1.18.4 - Multiple Cross-Site Scripting (XSS) vulnerabilities
Medium 4.8
2022-05-16< 1.20.0
CVE-2022-0873