WordPress plugin
Gallery by Visual Portfolio security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium4
- Low0
All Gallery by Visual Portfolio vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Authenticated (Subscriber+) Local File Inclusion ≤3.5.1Update to 3.5.2 | CVE-2026-32537 | |
| Medium6.4 | Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library ≤3.59.4Update to 3.59.5 | CVE-2024-5020 | |
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting via title_tag Parameter ≤3.3.2Update to 3.3.3 | CVE-2024-4363 | |
| Medium4.3 | Contributor+ CSS Injection ≤2.18.0Update to 2.19.0 | CVE-2022-2597 | |
| Medium5.3 | Unauthenticated CSS Injection ≤2.17.1Update to 2.18.0 | CVE-2022-2543 |
- High7.5Authenticated (Subscriber+) Local File Inclusion
≤3.5.1Update to 3.5.2
- Medium6.4Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
≤3.59.4Update to 3.59.5
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via title_tag Parameter
≤3.3.2Update to 3.3.3
- Medium4.3Contributor+ CSS Injection
≤2.18.0Update to 2.19.0
- Medium5.3Unauthenticated CSS Injection
≤2.17.1Update to 2.18.0
Gallery by Visual Portfolio: common questions
Does Gallery by Visual Portfolio have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Gallery by Visual Portfolio: 1 high, 4 medium. At least one is not fixed in the latest version.
How do I check which version of Gallery by Visual Portfolio I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Gallery by Visual Portfolio vulnerability?
CVE-2026-32537, published Mar 20, 2026: Visual Portfolio, Photo Gallery & Post Grid <= 3.5.1 - Authenticated (Subscriber+) Local File Inclusion. Severity: High (CVSS 7.5).
Is any Gallery by Visual Portfolio vulnerability listed in CISA KEV?
No. None of the known Gallery by Visual Portfolio vulnerabilities is currently listed in the CISA KEV catalog.