Contest-Gallery — Vulnerabilities & Security Advisories 12

Contest-Gallery is a WordPress plugin designed for managing photo and video contests on websites. Historically, it has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. The plugin's 12 recorded CVEs highlight consistent security flaws, often stemming from insufficient input validation and improper access controls. Notable characteristics include its widespread use in WordPress ecosystems and recurring patterns of unauthenticated RCE vulnerabilities. Security researchers have frequently identified critical flaws that allow attackers to compromise entire websites, making it a persistent target for exploitation.