Contest Gallery — Vulnerabilities & Security Advisories 5

Contest Gallery is a WordPress plugin designed for creating and managing photo contests and galleries. Historically, it has been vulnerable to multiple security issues including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation vulnerabilities. These flaws often stem from insufficient input validation and improper access controls. The plugin has accumulated five CVEs to date, with some versions allowing unauthenticated attackers to execute arbitrary code or compromise user accounts. While no major public incidents have been widely reported, the consistent pattern of vulnerabilities suggests that organizations using Contest Gallery should maintain strict version control and apply security patches promptly to mitigate potential risks.