Suiteplugins Video Photo Gallery For Ultimate Member vulnerabilities

CVE-2024-54370 [CRITICAL] CWE-434 CVE-2024-54370: Unrestricted Upload of File with Dangerous Type vulnerability in SuitePlugins Video & Photo Gallery Unrestricted Upload of File with Dangerous Type vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows Upload a Web Shell to a Web Server.This issue affects Video & Photo Gallery for Ultimate Member: from n/a through <= 1.1.0.

CVE-2025-32121 [HIGH] CWE-89 CVE-2025-32121: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows SQL Injection.This issue affects Video & Photo Gallery for Ultimate Member: from n/a through <= 1.1.3.

CVE-2025-22672 [MEDIUM] CWE-918 CVE-2025-22672: Server-Side Request Forgery (SSRF) vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Server-Side Request Forgery (SSRF) vulnerability in SuitePlugins Video & Photo Gallery for Ultimate Member gallery-for-ultimate-member allows Server Side Request Forgery.This issue affects Video & Photo Gallery for Ultimate Member: from n/a through <= 1.1.2.

CVE-2024-12162 [MEDIUM] CWE-79 CVE-2024-12162: The Video & Photo Gallery for Ultimate Member plugin for WordPress is vulnerable to Reflected Cross- The Video & Photo Gallery for Ultimate Member plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute i