WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Photo Gallery by 10Web – Mobile-Friendly Image Gallery

Photo Gallery is a powerful image gallery plugin with a list of advanced options for creating responsive image galleries with beautiful lightbox.

66Reported vulnerabilities
9.8Highest CVSS score
1.8.43Latest version
100,000+Active installs

What to do now

Update Photo Gallery by 10Web – Mobile-Friendly Image Gallery to 1.8.42 or later. 66 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 7, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-0169 Critical 9.8 74.6% Before 1.6.0 1.6.0 March 14, 2022
CVE-2022-1281 Critical 9.8 43.0% 1.6.3 and earlier 1.6.3 May 2, 2022
CVE-2014-9312 High 8.8 45.4% Before 1.2.6 1.2.6 February 12, 2015
CVE-2019-16119 Critical 9.8 24.8% Before 1.5.35 1.5.35 September 8, 2019
CVE-2021-24291 Medium 6.1 14.4% Before 1.5.69 1.5.69 May 14, 2021
CVE-2021-24462 High 8.8 1.4% Before 4.4.4 4.4.4 August 2, 2021
CVE-2015-1055 High 7.5 2.1% 1.2.7 to 1.2.7 (inclusive) 1.2.8 January 16, 2015
CVE-2021-24139 Critical 9.8 5.5% Before 1.5.55 1.5.55 March 18, 2021
CVE-2019-14313 Critical 9.8 4.5% Before 1.5.31 1.5.31 July 30, 2019
CVE-2015-1393 Medium 6.5 1.7% 1.2.9 and earlier 1.2.11 February 2, 2015
CVE-2019-14798 Medium 4.9 4.4% Before 1.5.25 1.5.25 August 9, 2019
CVE-2021-46889 Medium 6.1 0.6% 1.5.69 and earlier 1.5.69 June 7, 2023
CVE-2022-1282 Medium 6.1 0.9% Before 1.6.3 1.6.3 May 2, 2022
CVE-2021-25041 Medium 6.1 0.9% Before 1.5.68 1.5.68 December 6, 2021
CVE-2021-24362 Medium 6.1 0.8% Before 1.5.75 1.5.75 August 16, 2021
CVE-2015-1394 Medium 5.4 2.3% Before 1.2.11 1.2.11 February 8, 2020
CVE-2025-0613 Medium 6.1 0.3% Before 1.8.34 1.8.34 March 31, 2025
CVE-2023-2568 Medium 6.1 0.5% Before 5.1.7 5.1.7 June 12, 2023
CVE-2021-24363 Medium 4.9 1.9% Before 1.5.75 1.5.75 August 16, 2021
CVE-2022-4058 Medium 5.4 0.2% Before 1.8.3 1.8.3 December 19, 2022
CVE-2023-1427 Medium 4.9 0.8% Before 1.8.15 1.8.15 April 17, 2023
CVE-2022-1394 Medium 4.8 1.0% Before 1.6.4 1.6.4 June 8, 2022
CVE-2021-24310 Medium 4.8 1.1% Before 1.5.67 1.5.67 June 1, 2021
CVE-2015-9380 High 8.8 0.8% Before 1.2.42 1.2.42 August 30, 2019
CVE-2024-8670 Medium 4.8 0.3% Before 1.8.29 1.8.29 May 15, 2025
CVE-2024-10704 Medium 4.8 0.4% Before 1.8.31 1.8.31 November 29, 2024
CVE-2024-9878 Medium 4.8 0.4% Before 1.8.31 1.8.31 November 5, 2024
CVE-2024-5968 Medium 4.8 0.3% Before 1.8.28 1.8.28 October 9, 2024
CVE-2024-5481 High 8.8 0.7% Before 1.8.24 1.8.24 June 7, 2024
WF-0e3034ae-957f-410d-80ef-4dc2b0e91ff5 High 8.8 — Before 1.3.38 1.3.38 May 2, 2017
CVE-2019-16118 Medium 6.1 5.3% Before 1.5.35 1.5.35 September 8, 2019
CVE-2019-16117 Medium 6.1 4.6% Before 1.5.35 1.5.35 September 8, 2019
CVE-2024-0221 High 7.2 1.3% Before 1.8.20 1.8.20 February 5, 2024
CVE-2017-12977 High 7.2 1.6% 1.3.50 and earlier 1.3.51 August 21, 2017
CVE-2024-13124 Low 3.5 0.3% Before 1.8.33 1.8.33 March 24, 2025
CVE-2026-7048 Medium 6.5 0.5% 0 to 1.8.40 (inclusive) 1.8.41 May 28, 2026
CVE-2026-9829 Medium 6.5 0.5% 0 to 1.8.41 (inclusive) 1.8.42 June 6, 2026
CVE-2026-49771 Medium 6.5 0.3% 1.8.41 and earlier 1.8.42 June 4, 2026
WF-b7d84cb9-175f-433c-ab5c-d89621847b4d Medium 6.4 — 1.5.78 and earlier 1.5.79 July 19, 2021
CVE-2025-2269 Medium 6.1 0.3% 0 to 1.8.34 (inclusive) 1.8.35 April 12, 2025
CVE-2024-29809 Medium 6.1 0.4% 1.8.21 and earlier 1.8.22 March 26, 2024
CVE-2024-29832 Medium 6.1 0.4% 1.8.21 and earlier 1.8.22 March 26, 2024
CVE-2024-29808 Medium 6.1 0.4% 1.8.21 and earlier 1.8.22 March 26, 2024
CVE-2024-29810 Medium 6.1 0.4% 1.8.21 and earlier 1.8.22 March 26, 2024
CVE-2021-31693 Medium 6.1 0.4% 1.5.68 and earlier 1.5.69 November 29, 2022
WF-892a1983-018b-480d-adab-29c32fd88be5 Medium 6.1 — 1.8.0 and earlier 1.8.1 November 3, 2022
WF-8d65b779-717b-4efc-b13d-acdf83ca1e63 Medium 6.1 — 1.7.0 and earlier 1.7.1 August 10, 2022
WF-63e167ef-9f03-45a8-b3dc-240ccf1ea6c3 Medium 6.1 — 1.6.7 and earlier 1.6.8 June 28, 2022
WF-93c1b6d2-a818-4ce5-96b7-524fac4081b2 Medium 6.1 — 1.6.6 and earlier 1.6.7 June 16, 2022
WF-99c89e29-a21d-4c32-9459-18c7b08b9ff0 Medium 6.1 — 1.5.68 and earlier 1.5.69 February 23, 2021
WF-3c6fd92f-a541-42d1-8093-c3a4a61ab39b Medium 6.1 — Before 1.3.67 1.3.67 December 14, 2017
CVE-2019-14797 Medium 5.4 1.3% Before 1.5.23 1.5.23 August 9, 2019
CVE-2015-2324 Medium 5.4 0.9% Before 1.2.13 1.2.13 February 19, 2018
CVE-2024-5426 Medium 5.4 0.3% Before 1.8.24 1.8.24 June 7, 2024
WF-8b271f2f-d765-4d2d-bb0d-f8425ebc64ca Medium 5.5 — 1.6.8 and earlier 1.6.9 July 1, 2022
CVE-2026-1036 Medium 5.3 0.2% 0 to 1.8.36 (inclusive) 1.8.37 January 22, 2026
CVE-2024-33586 Medium 5.3 0.4% 1.8.20 and earlier 1.8.21 April 25, 2024
WF-5cc590fe-94c8-47cc-bd5b-eef70da138b1 Medium 5.4 — 1.8.7 and earlier 1.8.8 November 26, 2022
CVE-2020-9335 Medium 4.8 1.4% Before 1.5.46 1.5.46 February 25, 2020
CVE-2024-2296 Medium 4.8 0.4% Before 1.8.22 1.8.22 April 6, 2024
CVE-2023-6924 Medium 4.8 0.5% 1.8.18 and earlier 1.8.19 January 11, 2024
CVE-2024-44043 Medium 4.4 0.3% 1.8.27 and earlier 1.8.28 September 23, 2024
CVE-2026-32330 Medium 4.3 0.1% 1.8.37 and earlier 1.8.38 February 8, 2026
CVE-2026-27360 Medium 4.4 0.2% 1.8.38 and earlier 1.8.39 December 25, 2025
CVE-2023-33995 Medium 4.3 0.5% Before 1.8.16 1.8.16 June 2, 2023
WF-d2e040bd-df5f-4b40-bc7b-9521f224c297 Medium 4.1 — Before 1.3.43 1.3.43 June 16, 2017

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.