VulnTitan VulnTitan Security command center
Plugin Vulnerability Hub
Plugin 5 known issues Latest disclosed Jan 03, 2025

Gallery Images Ape Vulnerabilities

Review known vulnerability records for the WordPress plugin Gallery Images Ape (`gallery-images-ape`), including severity, CVE references, affected versions, and patch status.

Recent tracked CVEs on this page include CVE-2025-22317, CVE-2022-41785 and CVE-2022-41995, so operators can jump from disclosure to patch validation without scanning the full feed first.

View on WordPress.org Back to Feed
Known Records
5
High or Critical
1
Patch Coverage
100%
Last Updated
Feb 25, 2026
Related Security Guides

Use these guides while reviewing Gallery Images Ape fixes

Pair this plugin vulnerability hub with practical WordPress hardening, scanner, and patch workflow guidance.

Hardening
WordPress hardening checklist for exposed plugins

Review patch cadence, privileged access, XML-RPC exposure, backups, and monitoring controls.
Plugin Security
WordPress plugin security basics for patch decisions

Use ownership, update testing, least privilege, and removal criteria to reduce plugin risk.
Scanning
WordPress vulnerability scanner buyer's guide

Compare scanner coverage for plugin CVEs, version detection, alert noise, and remediation workflow.
Patch Decision Workflow

How to prioritize Gallery Images Ape remediation

Use the hub as a decision layer before opening individual records: confirm whether the issue has a CVE, whether a fixed version exists, and whether the affected range overlaps production installs.

Search-Ready Records
4
1. Match the Package
Confirm the installed WordPress plugin slug is gallery-images-ape before acting on any CVE from this cluster.
2. Sort by Severity
Start with 1 high or critical record, then review medium and unrated findings with public references.
3. Check Patch Evidence
5 records include a patch path; verify compatibility before closing the finding.
4. Monitor Gaps
0 records still lack a listed fixed release, so keep this hub in the review queue.
High-Signal Remediation Targets
CVE-2019-25149 High
Vulnerability remediation for Gallery Images Ape

Affected range: Versions before 2.0.7. Fixed version: 2.0.7.

CVE-2022-41785 Medium
Stored Cross-Site Scripting remediation for Gallery Images Ape

Affected range: Versions up to 2.2.8. Fixed version is not listed yet.

CVE-2025-22317 Medium
Cross-Site Scripting remediation for Gallery Images Ape

Affected range: Versions up to 2.2.8. Fixed version is not listed yet.

CVE-2019-6117 Medium
Stored Cross-Site Scripting remediation for Gallery Images Ape

Affected range: Versions up to 1.6.14. Fixed version: 2.0.0.

Priority CVE Quick Links

Fast paths into Gallery Images Ape CVE reports

Start with the highest-signal CVE records for this WordPress plugin before scanning the full vulnerability feed.

Indexed CVEs
5
Tracked CVE Issue Type Affected Versions Fixed Version CVSS
CVE-2019-25149
Gallery Images Ape <= 2.0.6 - Authenticated Plugin Deactivation
 Vulnerability Versions before 2.0.7 2.0.7 CVSS 7.6
CVE-2022-41785
Gallery Images Ape <= 2.2.8 - Authenticated (Contributor+) Cross-Site Scripting
 Stored Cross-Site Scripting Versions up to 2.2.8 No patch listed CVSS 6.4
CVE-2025-22317
Gallery Images Ape <= 2.2.8 - Reflected Cross-Site Scripting
 Cross-Site Scripting Versions up to 2.2.8 No patch listed CVSS 6.1
CVE-2019-6117
Gallery Images Ape <= 1.6.14 - Stored Cross-Site Scripting
 Stored Cross-Site Scripting Versions up to 1.6.14 2.0.0 CVSS 6.1
CVE-2022-41995
Gallery Images Ape <= 2.2.8 - Missing Authorization
 Authorization Bypass Versions up to 2.2.8 No patch listed CVSS 4.3
CVE-2019-25149 High 2.0.7
CVE-2019-25149 Gallery Images Ape Vulnerability

Gallery Images Ape <= 2.0.6 - Authenticated Plugin Deactivation

CVE-2022-41785 Medium No patch listed
CVE-2022-41785 Gallery Images Ape Stored Cross-Site Scripting

Gallery Images Ape <= 2.2.8 - Authenticated (Contributor+) Cross-Site Scripting

CVE-2025-22317 Medium No patch listed
CVE-2025-22317 Gallery Images Ape Cross-Site Scripting

Gallery Images Ape <= 2.2.8 - Reflected Cross-Site Scripting

CVE-2019-6117 Medium 2.0.0
CVE-2019-6117 Gallery Images Ape Stored Cross-Site Scripting

Gallery Images Ape <= 1.6.14 - Stored Cross-Site Scripting

CVE-2022-41995 Medium No patch listed
CVE-2022-41995 Gallery Images Ape Authorization Bypass

Gallery Images Ape <= 2.2.8 - Missing Authorization

Coverage Snapshot

What this page helps you verify fast

This hub clusters tracked records for Gallery Images Ape so operators can confirm whether a disclosed issue maps to the installed slug, version range, and patch path.

Patch Visibility
5 records include a published patch path, leaving 0 with no listed safe release yet.
Severity Mix
0 critical and 1 high severity finding.
Recent CVEs
CVE-2025-22317, CVE-2022-41785 and CVE-2022-41995
Reference Workflow
Jump from the hub into the full report when you need remediation notes, exploit context, CVSS vectors, or source references.
Triage First

Open the records most likely to drive action

These recent records surface the CVE strings, patch cues, and direct report links most operators need first.

Known Vulnerabilities

Reports for Gallery Images Ape

Sorted by latest disclosure date so newly published issues surface first.

Plugin Medium Patched: No CVE-2025-22317
CVE-2025-22317: Gallery Images Ape <= 2.2.8 - Reflected Cross-Site Scripting

The Gallery Images Ape plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...

Published
Jan 03, 2025
Patched Release
Not published
Affected Versions
Versions up to 2.2.8
Next Step
Open the full report for remediation notes and references.
Review CVE-2025-22317 fixed version details Open CVE Reference
Plugin Medium Patched: No CVE-2022-41785
CVE-2022-41785: Gallery Images Ape <= 2.2.8 - Authenticated (Contributor+) Cross-Site Scripting

The Gallery Images Ape plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and...

Published
Oct 31, 2022
Patched Release
Not published
Affected Versions
Versions up to 2.2.8
Next Step
Open the full report for remediation notes and references.
Review CVE-2022-41785 fixed version details Open CVE Reference
Plugin Medium Patched: No CVE-2022-41995
CVE-2022-41995: Gallery Images Ape <= 2.2.8 - Missing Authorization

The Gallery Images Ape plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when modifying galleries in versions up to, and including, 2.2.8. This makes it possible for authenticated attackers, with subscriber-level permissions and above, t...

Published
Oct 31, 2022
Patched Release
Not published
Affected Versions
Versions up to 2.2.8
Next Step
Open the full report for remediation notes and references.
Review CVE-2022-41995 fixed version details Open CVE Reference
Plugin High Patched: Yes CVE-2019-25149
CVE-2019-25149: Gallery Images Ape <= 2.0.6 - Authenticated Plugin Deactivation

The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and including, 2.0.6. This allows authenticated attackers with any capability level to deactivate any plugin on the site, including plugins necessary to site functionalit...

Published
Dec 30, 2019
Patched Release
2.0.7
Affected Versions
Versions before 2.0.7
Next Step
Update to 2.0.7 or newer if supported.
Review CVE-2019-25149 fixed version details Open CVE Reference
Plugin Medium Patched: Yes CVE-2019-6117
CVE-2019-6117: Gallery Images Ape <= 1.6.14 - Stored Cross-Site Scripting

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function.

Published
Jan 10, 2019
Patched Release
2.0.0
Affected Versions
Versions up to 1.6.14
Next Step
Update to 2.0.0 or newer if supported.
Review CVE-2019-6117 fixed version details Open CVE Reference