Modula Image Gallery – Photo Grid & Video Gallery <= 2.14.18 - Authenticated (Author+) PHP Object Injection
Modula Image Gallery – Photo Grid & Video Gallery
Minimum safe version
2.14.19
Update to 2.14.19 or later to address 19 fixable vulnerabilities
Modula Image Gallery – Photo Grid & Video Gallery <= 2.13.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post/Page Editing
CVE-2026-24939
Modula Image Gallery <= 2.13.4 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2025-14003
CVE-2025-13891
CVE-2025-13646
CVE-2025-13645
CVE-2025-12494
Modula Image Gallery <= 2.10.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library
CVE-2024-12853
Modula < 2.7.5 - Incomplete Authorization via 'save_image' and 'save_images'
WordPress Modula Image Gallery Plugin < 2.7.5 is vulnerable to Broken Access Control
Modula <= 2.7.4 - Incomplete Authorization via 'save_image' and 'save_images'
Modula Image Gallery < 2.6.7 - Reflected Cross-Site Scripting
Modula Image Gallery <= 2.6.6 - Reflected Cross-Site Scripting
CVE-2022-41135
WordPress Modula Image Gallery plugin <= 2.6.6 - Reflected Cross-Site Scripting (XSS) vulnerability
CVE-2020-9003