Vulnerabilities / Mixed Media Gallery Blocks
Mixed Media Gallery Blocks vulnerabilities
Advisories WPSec published for SimpLy Gallery. Other sources may list more. Its attack surface: Mixed Media Gallery Blocks on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-13 | WPSEC-2026-0859 | Mixed Media Gallery Blocks <= 3.4.4 - Authenticated (Contributor+) Missing Authorization to Shared Media Tag Deletion | Medium 4.3 | 3.4.5 |
| 2026-10-13 | WPSEC-2026-0858 | Mixed Media Gallery Blocks <= 3.4.4 - Authenticated (Author+) Missing Authorization to Media Folder Modification and Deletion | Medium 4.3 | 3.4.5 |
| 2026-10-02 | WPSEC-2026-0278 | Mixed Media Gallery Blocks <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via Global Presets | Medium 6.4 | 3.4.3 |
| 2026-10-02 | WPSEC-2026-0277 | Mixed Media Gallery Blocks <= 3.4.2 - Unauthenticated Sensitive Information Exposure via Gallery Block Video API Access Token | Medium 5.3 | 3.4.3 |
License: CC BY 4.0