Skip to main content

Software intelligence

Slideshow Gallery vulnerabilities

19 tracked advisories · slug slideshow-gallery

Important: Slideshow Gallery appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works

Tracked advisories

19

Latest advisory

17 June 2026

CISA KEV matches

0

In this WordPress feed

WordPress slug

slideshow-gallery

Plugin

What this means for Slideshow Gallery

This catalog lists 19 known advisories affecting Slideshow Gallery. The most recent was published on 17 June 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.

Latest issues

  • Slideshow Gallery LITE <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alwaysauto' Shortcode Attribute

    May allow attackers to run scripts in visitors' browsers or hijack admin sessions.

    Published 17 June 2026

  • Slideshow Gallery <= 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

    May allow attackers to run scripts in visitors' browsers or hijack admin sessions.

    Published 30 September 2024

  • Slideshow Gallery LITE <= 1.8.1 - Authenticated (Contributor+) SQL Injection

    May allow attackers to read or modify database contents beyond intended access.

    Published 11 June 2024

Vulnerability types

  • Cross-site scripting9
  • SQL injection4
  • CSRF3
  • Remote code execution2

Authentication (inferred from titles)

  • Unauthenticated1
  • Authenticated5
  • Unspecified13

Advisory history

Known Slideshow Gallery advisories published by month.

All advisories

1–15 of 19

1 / 2

Check whether your installed version is affected

SiteRespond Defence matches your installed Slideshow Gallery version against this catalog when the Defence plugin is connected to your WordPress site.