CVE-2026-84781: WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
Published Sep 2, 2026
·Updated
Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions.
Affected Software
1 affected component
Gallery PhotoBlocks<=1.3.4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Gallery PhotoBlocks pluginto a version that resolves this vulnerability.Fixed in 1.3.5
Event History
Sep 2, 2026
CVE Published
via MITRE·11:37 AM
Data Sourced
via MITRE·11:37 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
An attacker needs Contributor-level access to a WordPress site using an affected Gallery PhotoBlocks version. Exploitation also requires user interaction.
2
What is the potential impact?
Successful exploitation can result in cross-site scripting in a different security scope. The reported impacts include limited confidentiality, integrity, and availability effects.