Known vulnerabilities in Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe
JPG, PNG, MP4, MP3, PDF, ZIP & more. Create voting & uploading galleries for photos & media. Social Share, User Registration & Sell via PayPal/Stripe.
64Reported vulnerabilities
9.9Highest CVSS score
32.0.1Latest version
1,000+Active installs
What to do now
Update Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe to 30.0.6 or later.
64 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2021-24915 | Critical | 12.7% | Before 13.1.0.6 | 13.1.0.6 |
November 29, 2021 |
| CVE-2022-4158 | High | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4156 | High | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4166 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4165 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4164 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4163 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4162 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4161 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4160 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4159 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4153 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4152 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4151 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4150 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2023-5307 | Medium | 0.5% | Before 21.2.8.1 | 21.2.8.1 |
October 31, 2023 |
| CVE-2024-11103 | Critical | 0.8% | Before 24.0.8 | 24.0.8 |
November 28, 2024 |
| CVE-2024-30238 | Critical | 0.6% | 21.3.2 and earlier | 21.3.2.1 |
March 26, 2024 |
| CVE-2024-30236 | Critical | 0.6% | 21.3.4 and earlier | 21.3.5 |
March 26, 2024 |
| CVE-2024-10687 | Critical | 0.6% | Before 24.0.4 | 24.0.4 |
November 5, 2024 |
| CVE-2022-4157 | Medium | 0.9% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-4155 | Medium | 0.8% | Before 19.1.5.1 | 19.1.5.1 |
December 26, 2022 |
| CVE-2022-36394 | High | 0.9% | 17.0.4 and earlier | 17.0.5 |
August 23, 2022 |
| CVE-2019-5974 | High | 1.0% | 10.4.4 and earlier | 10.4.5 |
June 12, 2019 |
| CVE-2026-12165 | High | 0.4% | 0 to 30.0.2 (inclusive) | 30.0.3 |
June 17, 2026 |
| CVE-2024-24887 | High | 0.2% | Before 21.2.9 | 21.2.9 |
February 12, 2024 |
| CVE-2026-4021 | High | 0.4% | 0 to 28.1.5 (inclusive) | 28.1.6 |
March 24, 2026 |
| CVE-2026-3180 | High | 0.9% | 0 to 28.1.4 (inclusive) | 28.1.5 |
March 2, 2026 |
| CVE-2026-8912 | High | 0.4% | 0 to 28.1.6 (inclusive) | 28.1.7 |
May 19, 2026 |
| CVE-2026-40771 | High | 0.3% | 28.1.6 and earlier | 28.1.7 |
April 21, 2026 |
| CVE-2026-61986 | High | 0.1% | 30.0.5 and earlier | 30.0.6 |
August 19, 2026 |
| CVE-2026-65447 | High | 0.1% | 30.0.6 and earlier | 30.0.7 |
July 27, 2026 |
| CVE-2025-7725 | High | 0.2% | 26.1.0 and earlier | 26.1.1 |
July 31, 2025 |
| WF-1f9d8bbe-205f-44b6-a0c6-89b9135e6363 | High | — | 17.0.4 and earlier | 17.0.5 |
June 1, 2022 |
| CVE-2025-22693 | Medium | 0.6% | 25.1.0 and earlier | 25.1.2 |
January 31, 2025 |
| CVE-2026-16586 | Medium | 0.3% | 0 to 30.0.7 (inclusive) | 31.0.0 |
August 15, 2026 |
| CVE-2026-57662 | Medium | 0.4% | 30.0.0 and earlier | 30.0.1 |
June 26, 2026 |
| CVE-2024-56237 | Medium | 0.3% | 24.0.3 and earlier | 24.0.4 |
December 30, 2024 |
| CVE-2022-27853 | Medium | 0.5% | 13.1.0.9 and earlier | 14.0.0 |
December 20, 2021 |
| CVE-2026-42656 | Medium | 0.2% | 28.1.6 and earlier | 29.0.0 |
April 29, 2026 |
| CVE-2026-24964 | Medium | 0.2% | 28.1.2.1 and earlier | 28.1.2.2 |
March 10, 2026 |
| CVE-2025-10383 | Medium | 0.2% | 0 to 27.0.2 (inclusive) | 27.0.3 |
October 4, 2025 |
| CVE-2025-6716 | Medium | 0.2% | 26.0.8 and earlier | 26.0.9 |
July 10, 2025 |
| CVE-2025-48291 | Medium | 0.2% | 26.0.6 and earlier | 26.0.7 |
July 11, 2025 |
| CVE-2025-1513 | Medium | 0.3% | Before 26.0.1 | 26.0.1 |
February 28, 2025 |
| CVE-2024-39631 | Medium | 0.3% | 23.1.2 and earlier | 23.1.3 |
July 24, 2024 |
| CVE-2024-30428 | Medium | 0.4% | 21.3.5 and earlier | 21.3.6 |
March 28, 2024 |
| CVE-2023-28784 | Medium | 0.4% | 21.1.2 and earlier | 21.1.2.1 |
March 27, 2023 |
| CVE-2022-45848 | Medium | 0.4% | 13.1.0.9 and earlier | 14.0.0 |
December 6, 2022 |
| CVE-2024-43283 | Medium | 1.1% | 23.1.2 and earlier | 23.1.3 |
August 16, 2024 |
| CVE-2025-3862 | Medium | 0.3% | Before 26.0.7 | 26.0.7 |
May 8, 2025 |
| CVE-2024-1487 | Medium | 0.4% | Before 21.3.1 | 21.3.1 |
March 11, 2024 |
| CVE-2026-42657 | Medium | 0.2% | 28.1.7 and earlier | 29.0.0 |
April 29, 2026 |
| CVE-2026-25035 | Medium | 0.4% | 28.1.2.2 and earlier | 28.1.3 |
March 23, 2026 |
| CVE-2025-12849 | Medium | 0.3% | 0 to 28.0.2 (inclusive) | 28.0.3 |
November 15, 2025 |
| WF-f2b5213d-fdc5-4c98-9a05-15d83bd7308f | Medium | — | 21.2.8.4 and earlier | 21.2.9 |
January 9, 2024 |
| CVE-2024-32778 | Medium | 0.6% | 21.3.4 and earlier | 21.3.5 |
April 22, 2024 |
| CVE-2026-16056 | Medium | 0.2% | 30.0.6 and earlier | 30.0.7 |
July 27, 2026 |
| CVE-2026-16057 | Medium | 0.2% | 30.0.6 and earlier | 30.0.7 |
July 23, 2026 |
| CVE-2026-42660 | Medium | 0.3% | 28.1.7 and earlier | 29.0.0 |
April 29, 2026 |
| CVE-2026-24965 | Medium | 0.2% | 28.1.1 and earlier | 28.1.2 |
January 9, 2026 |
| CVE-2025-62950 | Medium | 0.1% | 28.0.0 and earlier | 28.0.1 |
October 12, 2025 |
| CVE-2025-11254 | Medium | 0.3% | 0 to 27.0.3 (inclusive) | 28.0.0 |
October 11, 2025 |
| WF-7759b209-4211-4ee5-ae7a-42645f5d5e96 | Medium | — | Before 13.1.0.7 | 13.1.0.7 |
November 1, 2021 |