WordPress security by component

PostGallery

Plugin description

PostGallery is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 04, 2025; the highest CVE/CNA score is 8.8.

Plugin slug: postgallery

Latest vulnerability

CVE-2025-13543: PostGallery: Dangerous file upload

PostGallery is affected by dangerous file upload. Exploitation requires an authenticated WordPress account. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedDec 04, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 04, 2025	CVE-2025-13543 PostGallery: Dangerous file upload PostGallery is affected by dangerous file upload. Exploitation requires an authenticated WordPress account. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE8.8 NVDPending