WordPress plugin
Powerplay Gallery security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical3
- High0
- Medium1
- Low0
All Powerplay Gallery vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Arbitrary File Upload ≤3.3No patch available | CVE-2015-5681 | |
| Critical9.8 | Arbitrary File Upload ≤3.3No patch available | CVE-2015-5682 | |
| Critical9.8 | SQL Injection ≤3.3No patch available | CVE-2015-5599 | |
| Medium6.1 | Cross-Site Scripting ≤1.9.6Update to 1.9.7 | CVE-2012-3414 |
- Critical9.8Arbitrary File Upload
≤3.3No patch available
- Critical9.8Arbitrary File Upload
≤3.3No patch available
- Critical9.8SQL Injection
≤3.3No patch available
- Medium6.1Cross-Site Scripting
≤1.9.6Update to 1.9.7
Powerplay Gallery: common questions
Does Powerplay Gallery have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Powerplay Gallery: 3 critical, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Powerplay Gallery I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Powerplay Gallery vulnerability?
CVE-2015-5681, published Jul 1, 2015: Powerplay Gallery <= 3.3 - Arbitrary File Upload. Severity: Critical (CVSS 9.8).
Is any Powerplay Gallery vulnerability listed in CISA KEV?
No. None of the known Powerplay Gallery vulnerabilities is currently listed in the CISA KEV catalog.