Photo Gallery by Supsystic vulnerabilities

3 known CVE vulnerabilities in Photo Gallery by Supsystic, translated and rated.

CVE-2026-102399Medium
Unauthenticated Cross Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic versions up to 1.21.0. Allows an attacker to perform unauthorized actions on behalf of a logged-in user.
CVE-2026-119484Medium
The Photo Gallery by Supsystic plugin for WordPress (up to version 1.21.6) is vulnerable to Cross-Site Request Forgery (CSRF), allowing unwanted actions on behalf of a logged-in user.
CVE-2026-24628Medium
The Photo Gallery by Supsystic plugin versions up to 1.16.3 contain a Cross-Site Scripting (XSS) vulnerability, allowing administrators to inject malicious scripts into pages.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS