--- title: "10Web Photo Gallery by 10Web vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/10web/photo-gallery-by-10web type: product description: "10Web Photo Gallery by 10Web has 6 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2026-10-10 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # 10Web Photo Gallery by 10Web vulnerabilities Vendor: [10Web](https://radicalnotion.ai/vendor/10web) - **Published CVEs:** 6 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 6 - **Average CVSS:** 6.6 - **First CVE:** 2024-10-06 - **Latest CVE:** 2026-10-10 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 0 | | High | 3 | | Medium | 3 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 3 | | [CWE-352](https://radicalnotion.ai/cwe/cwe-352) | Cross-Site Request Forgery (CSRF) | 1 | | [CWE-502](https://radicalnotion.ai/cwe/cwe-502) | Deserialization of Untrusted Data | 1 | | [CWE-89](https://radicalnotion.ai/cwe/cwe-89) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2024 | 1 | | 2025 | 0 | | 2026 | 5 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | \<= 1.8.27 | range | 1 | | \<= 1.8.37 | range | 1 | | \<= 1.8.38 | range | 1 | | \<= 1.8.41 | range | 1 | | \<= 1.8.46 | range | 1 | | \<= 1.8.47 | range | 1 | | \>= 1.8.28 | range | 1 | | \>= 1.8.38 | range | 1 | | \>= 1.8.39 | range | 1 | | \>= 1.8.42 | range | 1 | | \>= 1.8.47 | range | 1 | | 1.8.28 | patched | 1 | | 1.8.38 | patched | 1 | | 1.8.39 | patched | 1 | | 1.8.42 | patched | 1 | | 1.8.47 | patched | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-42715 | WordPress Photo Gallery by 10Web plugin \<= 1.8.47 - Cross Site Scripting (XSS) vulnerability | high | 7.1 | No | No | Yes | | CVE-2026-102377 | WordPress Photo Gallery by 10Web plugin \<= 1.8.46 - PHP Object Injection vulnerability | high | 8.8 | No | No | Yes | | CVE-2026-49771 | WordPress Photo Gallery by 10Web plugin \<= 1.8.41 - SQL Injection vulnerability | high | 7.6 | No | No | Yes | | CVE-2026-32330 | WordPress Photo Gallery by 10Web plugin \<= 1.8.37 - Cross Site Request Forgery (CSRF) vulnerability | medium | 4.3 | No | No | Yes | | CVE-2026-27360 | WordPress Photo Gallery by 10Web plugin \<= 1.8.38 - Cross Site Scripting (XSS) vulnerability | medium | 5.9 | No | No | Yes | | CVE-2024-44043 | WordPress Photo Gallery by 10Web plugin \<= 1.8.27 - Cross Site Scripting (XSS) vulnerability | medium | 5.9 | No | No | Yes | ## Frequently asked questions ### How many CVEs does 10Web Photo Gallery by 10Web have? 10Web Photo Gallery by 10Web has 6 published CVE records since 2024. ### How many 10Web Photo Gallery by 10Web CVEs are in CISA KEV? None of 10Web Photo Gallery by 10Web's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for 10Web Photo Gallery by 10Web vulnerabilities? No 10Web Photo Gallery by 10Web CVEs currently have a tracked public exploit in this dataset. ### Which versions of 10Web Photo Gallery by 10Web are affected? 16 distinct 10Web Photo Gallery by 10Web versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in 10Web Photo Gallery by 10Web CVEs? 10Web Photo Gallery by 10Web's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-502 (Deserialization of Untrusted Data), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')). ### What is the average severity of 10Web Photo Gallery by 10Web CVEs? The average CVSS base score across 10Web Photo Gallery by 10Web's scored CVEs is 6.6. ## Other products from this vendor - [photo gallery](https://radicalnotion.ai/vendor/10web/photo-gallery) (49 CVEs) - [Form Maker](https://radicalnotion.ai/vendor/10web/form-maker) (26 CVEs) - [Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder](https://radicalnotion.ai/vendor/10web/form-maker-by-10web-mobile-friendly-drag-and-drop-contact-form-builder) (20 CVEs) - [Photo Gallery by 10Web – Mobile-Friendly Image Gallery](https://radicalnotion.ai/vendor/10web/photo-gallery-by-10web-mobile-friendly-image-gallery) (15 CVEs) - [slider](https://radicalnotion.ai/vendor/10web/slider) (12 CVEs) - [10Web Booster – Website speed optimization, Cache & Page Speed optimizer](https://radicalnotion.ai/vendor/10web/10web-booster-website-speed-optimization-cache-and-page-speed-optimizer) (5 CVEs) - [PhotoGallery](https://radicalnotion.ai/vendor/10web/photogallery) (5 CVEs) - [Slider by 10Web](https://radicalnotion.ai/vendor/10web/slider-by-10web) (5 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/10web/photo-gallery-by-10web). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.