CVE-2025-11866 | Photographers Galleries Plugin up to 1.1.8 on WordPress Shortcode cross site scripting

October 22, 2025 Yanac

A vulnerability was found in Photographers Galleries Plugin up to 1.1.8 on WordPress. It has been declared as problematic. This impacts an unknown function of the component Shortcode Handler. Executing manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2025-11866. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More