WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Modula Image Gallery – Photo Grid & Video Gallery

Create responsive image galleries with drag-and-drop grid builder. Custom layouts, video support, AI optimization. Works with any theme.

16Reported vulnerabilities
7.5Highest CVSS score
2.14.36Latest version
100,000+Active installs

What to do now

Update Modula Image Gallery – Photo Grid & Video Gallery to 2.14.31 or later. 16 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 13, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2026-39481 High 7.5 0.4% 2.14.18 and earlier 2.14.19 April 20, 2026
CVE-2025-13645 High 7.2 1.0% 2.13.1 up to (but not including) 2.13.3 2.13.3 December 3, 2025
CVE-2025-13646 Medium 6.6 0.8% 2.13.1 up to (but not including) 2.13.3 2.13.3 December 3, 2025
CVE-2025-13891 Medium 6.5 0.4% 0 to 2.13.3 (inclusive) 2.13.4 December 12, 2025
CVE-2026-65475 Medium 6.4 0.2% 2.14.25 to 2.14.30 (inclusive) 2.14.31 July 22, 2026
CVE-2026-42688 Medium 6.4 0.2% 2.14.23 and earlier 2.14.24 May 26, 2026
CVE-2026-23976 Medium 6.4 0.2% 2.13.4 and earlier 2.13.5 February 4, 2026
WF-354c2c6c-5ba1-4bbe-88e4-9d219b66802a Medium 6.1 — 2.6.6 and earlier 2.6.7 June 6, 2022
CVE-2020-9003 Medium 5.4 1.0% Before 2.2.5 2.2.5 February 20, 2020
CVE-2024-9416 Medium 5.4 0.2% Before 2.10.2 2.10.2 April 3, 2025
CVE-2022-41135 Medium 5.3 0.5% Before 2.6.91 2.6.91 November 18, 2022
CVE-2026-1254 Medium 4.3 0.2% 0 to 2.13.6 (inclusive) 2.13.7 February 14, 2026
CVE-2025-14003 Medium 4.3 0.2% 0 to 2.13.3 (inclusive) 2.13.4 December 15, 2025
CVE-2026-24939 Medium 4.3 0.2% 2.13.6 and earlier 2.13.7 November 22, 2025
CVE-2025-12494 Medium 4.3 0.2% 0 to 2.12.28 (inclusive) 2.12.29 November 15, 2025
WF-f029bd86-d979-45d1-97fe-75c43fb71148 Low 2.2 — Before 2.7.5 2.7.5 September 10, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.