SecAlerts
c

contest gallery

Security Risk Profile

36
/100
low

Security Risk Score

Comprehensive risk assessment based on 14 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from November 29, 2021 to present

14
Total CVEs
7
Critical+High
0
Exploited
6
Unpatched

Threat Assessment

Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
6
Critical/High
Risk Level
36/100
low
📈 2 in Last 30 Days

Severity Distribution

Critical
2
High
5
Medium
7
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
5

Age Distribution

Common Weaknesses (CWE)

1
SQL Injection
4
2
XSS
4

Most Affected Products

1. Contest Gallery Contest Gallery9
2. contest-gallery Contest Gallery Wordpress4
3. Contest Gallery Contest Gallery (WordPress plugin)2
4. Contest Gallery Contest Gallery – Upload, Vote & Sell with PayPal and Stripe2
5. WordPress Contest Gallery plugin1

Recent Vulnerabilities

See more →
CVE-2026-107447
CVSS 5.3medium

Contest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter Identity

Oct 21, 2026🔧 No Patch
CVE-2026-107120
CVSS 5.3medium

Contest Gallery < 33.0.1 - Unauthenticated Email Verification Bypass via Brute-Forceable Registration PIN

Oct 10, 2026🔧 No Patch
CVE-2026-12165
CVSS 8.8high

Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter

Jun 17, 2026🔧 No Patch
CVE-2026-8912
CVSS 7.5EPSS 0%high

Contest Gallery <= 28.1.6 - Unauthenticated SQL Injection

May 19, 2026🔧 No Patch
CVE-2026-4021
CVSS 8.1EPSS 0%high

Contest Gallery <= 28.1.5 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion

Mar 23, 2026🔧 No Patch
CVE-2025-11254
CVSS 4.3medium

Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injection

Oct 11, 2025🔧 No Patch
CVE-2025-10383
CVSS 6.4medium

Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting

Oct 4, 2025🔧 No Patch
CVE-2025-6716
CVSS 6.4EPSS 0%medium

Contest Gallery <= 26.0.8 - Authenticated (Author+) Stored Cross-Site Scripting

Jul 11, 2025🔧 No Patch
CVE-2025-3862
CVSS 6.4medium

Contest Gallery <= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

May 8, 2025
CVE-2025-22693
CVSS 7.6EPSS 0%high

WordPress Contest Gallery plugin <= 25.1.0 - SQL Injection vulnerability

Feb 3, 2025🔧 No Patch

Monitor contest gallery in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

contest gallery Security Vulnerabilities & Risk Score | 14 CVEs | SecAlerts - SecAlerts