WordPress plugin
Photo Gallery by Ays – Responsive Image Gallery security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 11 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium9
- Low0
All Photo Gallery by Ays – Responsive Image Gallery vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.9 | Authenticated (Administrator+) SQL Injection via 's' Parameter ≤6.8.2Update to 6.8.3 | CVE-2026-76006 | |
| Medium4.3 | Cross-Site Request Forgery to Bulk Actions ≤6.4.8Update to 6.4.9 | CVE-2025-13685 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤6.3.8Update to 6.3.9 | CVE-2025-57947 | |
| Medium4.4 | Authenticated (Administrator+) HTML Injection <5.7.1Update to 5.7.1 | CVE-2024-37442 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤5.5.2Update to 5.5.3 | CVE-2024-29919 | |
| Medium4.3 | Cross-Site Request Forgery ≤5.2.6Update to 5.2.7 | CVE-2023-39917 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤5.1.6Update to 5.1.7 | CVE-2023-2568 | |
| Medium6.1 | Reflected Cross-Site Scripting via ays_gpg_settings_tab ≤5.1.3Update to 5.1.4 | CVE-2023-32107 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤4.4.3Update to 4.4.4 | — | |
| High7.2 | Responsive Image Gallery <= 4.4.3 - Authenticated Blind SQL Injections <4.4.4Update to 4.4.4 | CVE-2021-24462 | |
| Critical9.8 | SQL Injection <1.0.1Update to 1.0.1 | CVE-2016-10921 |
- Medium4.9Authenticated (Administrator+) SQL Injection via 's' Parameter
≤6.8.2Update to 6.8.3
- Medium4.3Cross-Site Request Forgery to Bulk Actions
≤6.4.8Update to 6.4.9
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤6.3.8Update to 6.3.9
- Medium4.4Authenticated (Administrator+) HTML Injection
<5.7.1Update to 5.7.1
- Medium6.1Reflected Cross-Site Scripting
≤5.5.2Update to 5.5.3
- Medium4.3Cross-Site Request Forgery
≤5.2.6Update to 5.2.7
- Medium6.1Reflected Cross-Site Scripting
≤5.1.6Update to 5.1.7
- Medium6.1Reflected Cross-Site Scripting via ays_gpg_settings_tab
≤5.1.3Update to 5.1.4
- Medium6.1Reflected Cross-Site Scripting
≤4.4.3Update to 4.4.4
- High7.2Responsive Image Gallery <= 4.4.3 - Authenticated Blind SQL Injections
<4.4.4Update to 4.4.4
- Critical9.8SQL Injection
<1.0.1Update to 1.0.1
Photo Gallery by Ays – Responsive Image Gallery: common questions
Does Photo Gallery by Ays – Responsive Image Gallery have known vulnerabilities?
Yes. VulnCrest Radar lists 11 known vulnerabilities in Photo Gallery by Ays – Responsive Image Gallery: 1 critical, 1 high, 9 medium. None are known to affect version null.
How do I check which version of Photo Gallery by Ays – Responsive Image Gallery I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Photo Gallery by Ays – Responsive Image Gallery vulnerability?
CVE-2026-76006, published Aug 31, 2026: Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter. Severity: Medium (CVSS 4.9).
Is any Photo Gallery by Ays – Responsive Image Gallery vulnerability listed in CISA KEV?
No. None of the known Photo Gallery by Ays – Responsive Image Gallery vulnerabilities is currently listed in the CISA KEV catalog.