---
title: "10Web PhotoGallery vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/10web/photogallery
type: product
description: "10Web PhotoGallery has 5 published CVEs, 0 in CISA KEV and 5 with public exploits."
updated: 2024-03-26
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# 10Web PhotoGallery vulnerabilities

Vendor: [10Web](https://radicalnotion.ai/vendor/10web)

- **Published CVEs:** 5
- **In CISA KEV:** 0
- **With a public exploit:** 5
- **With a patch:** 5
- **Average CVSS:** 5.5
- **First CVE:** 2024-03-26
- **Latest CVE:** 2024-03-26

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 0 |
| High | 0 |
| Medium | 5 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 5 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2024 | 5 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| 1.0.1 \<= v \<= 1.8.21 | range | 5 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2024-29833 | WordPress Photo Gallery Plugin \<= 1.8.21 Stored Cross Site Scripting in UploadHandler | medium | 5.4 | No | Yes | Yes |
| CVE-2024-29810 | WordPress Photo Gallery Plugin \<= 1.8.21 Reflected Cross Site Scripting in editimage\_bwg thumb\_url | medium | 5.4 | No | Yes | Yes |
| CVE-2024-29809 | WordPress Photo Gallery Plugin \<= 1.8.21 Reflected Cross Site Scripting in editimage\_bwg image\_url | medium | 5.4 | No | Yes | Yes |
| CVE-2024-29808 | WordPress Photo Gallery Plugin \<= 1.8.21 Reflected Cross Site Scripting in editimage\_bwg image\_id | medium | 5.4 | No | Yes | Yes |
| CVE-2024-29832 | WordPress Photo Gallery Plugin \<= 1.8.21 Unauthenticated Reflected Cross Site Scripting in GalleryBox current\_url | medium | 6.1 | No | Yes | Yes |

## Frequently asked questions

### How many CVEs does 10Web PhotoGallery have?

10Web PhotoGallery has 5 published CVE records since 2024.

### How many 10Web PhotoGallery CVEs are in CISA KEV?

None of 10Web PhotoGallery's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for 10Web PhotoGallery vulnerabilities?

Yes — 5 of 10Web PhotoGallery's CVEs have a known public exploit.

### Which versions of 10Web PhotoGallery are affected?

1 distinct 10Web PhotoGallery version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in 10Web PhotoGallery CVEs?

10Web PhotoGallery's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

### What is the average severity of 10Web PhotoGallery CVEs?

The average CVSS base score across 10Web PhotoGallery's scored CVEs is 5.5.

## Other products from this vendor

- [photo gallery](https://radicalnotion.ai/vendor/10web/photo-gallery) (49 CVEs)
- [Form Maker](https://radicalnotion.ai/vendor/10web/form-maker) (26 CVEs)
- [Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder](https://radicalnotion.ai/vendor/10web/form-maker-by-10web-mobile-friendly-drag-and-drop-contact-form-builder) (20 CVEs)
- [Photo Gallery by 10Web – Mobile-Friendly Image Gallery](https://radicalnotion.ai/vendor/10web/photo-gallery-by-10web-mobile-friendly-image-gallery) (15 CVEs)
- [slider](https://radicalnotion.ai/vendor/10web/slider) (12 CVEs)
- [Photo Gallery by 10Web](https://radicalnotion.ai/vendor/10web/photo-gallery-by-10web) (6 CVEs)
- [10Web Booster – Website speed optimization, Cache & Page Speed optimizer](https://radicalnotion.ai/vendor/10web/10web-booster-website-speed-optimization-cache-and-page-speed-optimizer) (5 CVEs)
- [Slider by 10Web](https://radicalnotion.ai/vendor/10web/slider-by-10web) (5 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/10web/photogallery). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.