Reflected Cross-Site Scripting Vulnerability in Image Gallery Plugin for WordPress

CVE-2025-8400

What is CVE-2025-8400?

The Image Gallery plugin for WordPress exposes a security weakness that allows attackers to exploit inadequate input sanitization and output escaping methods. This vulnerability permits unauthorized users to inject malicious web scripts into pages served by the plugin. When users visit an affected page, their browsers may execute these scripts, potentially compromising sensitive information or allowing further attacks. Website administrators should ensure use of secure versions of the plugin and implement proper security measures to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References