Contest-gallery

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 50
    Known Exploited: 0
    2
    Critical Level Threats
    18
    High Level Threats
    30
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-16586

    Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'

    Last Modified: Aug 17, 2026
    Published: Aug 15, 2026

    CVE-2026-16055

    Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login

    Last Modified: Aug 05, 2026
    Published: Aug 05, 2026

    CVE-2026-16056

    Contest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts

    Last Modified: Aug 04, 2026
    Published: Aug 04, 2026

    CVE-2026-16057

    Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library

    Last Modified: Aug 04, 2026
    Published: Aug 03, 2026

    CVE-2026-12165

    Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter

    Last Modified: Jun 17, 2026
    Published: Jun 17, 2026
    Items Per Page
    Contest-Gallery Vulnerabilities & Security CVEs | CVE-DB