WordPress plugin
Contest Gallery Pro security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 18 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High16
- Medium1
- Low0
All Contest Gallery Pro vulnerabilities
- Critical9.8Unauthenticated Privilege Escalation
≤29.0.1Update to 29.0.2
- High8.1Unauthenticated SQL Injection via user_id
≤19.1.5Update to 19.1.5.1
- High7.5Authenticated (Author+) SQL Injection via cg_option_id
≤19.1.4.1Update to 19.1.5
- High7.5Authenticated (Author+) SQL Injection via wp_user_id
≤19.1.4.1Update to 19.1.5
- High7.5Authenticated (Author+) SQL Injection via cg_multiple_files_for_post
≤19.1.4.1Update to 19.1.5
- High7.5Authenticated (Author+) SQL Injection via cg_copy_id
≤19.1.4.1Update to 19.1.5
- High7.5Authenticated (Author+) SQL Injection via cg_copy_start
≤19.1.4.1Update to 19.1.5
- High8.1Unauthenticated SQL Injection via cg_Fields
≤19.1.4.1Update to 19.1.5
- High8.8SQL Injection via option_id
≤19.1.5Update to 19.1.5.1
- High7.5Authenticated (Author+) SQL Injection via addCountS
≤19.1.4.1Update to 19.1.5
- High7.5Authenticated (Author+) SQL Injection via option_id GET
≤19.1.4.1Update to 19.1.5
- High7.5Authenticated (Author+) SQL Injection via cg_order
≤19.1.4.1Update to 19.1.5
- High7.5Authenticated (Author+) SQL Injection via cg_row
≤19.1.4.1Update to 19.1.5
- High7.5Authenticated (Author+) SQL Injection via cg_id
≤19.1.5Update to 19.1.5.1
- High7.5Authenticated (Author+) SQL Injection via upload[]
≤19.1.5Update to 19.1.5.1
- High7.5Authenticated (Author+) SQL Injection via cg_activate and cg_deactivate
≤19.1.4.1Update to 19.1.5
- High7.5Authenticated (Author+) SQL Injection via option_id
≤19.1.4.1Update to 19.1.5
Contest Gallery Pro: common questions
Does Contest Gallery Pro have known vulnerabilities?
Yes. VulnCrest Radar lists 18 known vulnerabilities in Contest Gallery Pro: 1 critical, 16 high, 1 medium. None are known to affect version null.
How do I check which version of Contest Gallery Pro I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Contest Gallery Pro vulnerability?
CVE-2026-42680, published May 17, 2026: Contest Gallery Pro <= 29.0.1 - Unauthenticated Privilege Escalation. Severity: Critical (CVSS 9.8).
Is any Contest Gallery Pro vulnerability listed in CISA KEV?
No. None of the known Contest Gallery Pro vulnerabilities is currently listed in the CISA KEV catalog.