MaxGalleria
Maxfoundry · 3 CVEs
CVE-2026-97260
HIGH
WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability
Oct 1, 2026
CVE-2024-5970
MEDIUM
MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode
Jun 18, 2024
CVE-2024-3581
MEDIUM
MaxGalleria <= 6.4.2 - Missing Authorization
May 2, 2024
CVE-2022-25603
MEDIUM
WordPress MaxGalleria plugin <= 6.2.5 - Stored Cross-Site Scripting (XSS) vulnerability
Mar 18, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-97260 | WordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability | HIGH | 0.18% | Oct 1, 2026 |
| CVE-2024-5970 | MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode | MEDIUM | 0.27% | Jun 18, 2024 |
| CVE-2024-3581 | MaxGalleria <= 6.4.2 - Missing Authorization | MEDIUM | 0.61% | May 2, 2024 |
| CVE-2022-25603 | WordPress MaxGalleria plugin <= 6.2.5 - Stored Cross-Site Scripting (XSS) vulnerability | MEDIUM | 0.56% | Mar 18, 2022 |
Showing 1 to 3 of 3 CVEs