Codeasily Grand Flagallery — known CVE vulnerabilities

Every CVE whose affected-product data names Codeasily Grand Flagallery, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2014-8491 — CVSS 5.3 (medium): The Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the installation path via a request to (1)…
• CVE-2021-24903 — CVSS 4.8 (medium): The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high…
• CVE-2011-4624 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress…