CVE-2026-73184

WordPress Global Gallery plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.

We have discovered 2,061 live websites that are affected by CVE-2026-73184.

Run a Free Instant Scan



Affected Software

Product  Global Gallery
Category Wordpress Plugins
Vulnerable Domains2,061 live websites (100% of Global Gallery install base)
Vulnerable Versions
  • from 0 through 11.1.2
Vulnerable Versions Count153 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Aug 19, 2026
  • Updated - Aug 19, 2026

Credits

  • Nguyen Ba Khanh - HPT Vietnam Corporation | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-73184
United States575 websites


Germany196 websites
Italy148 websites
GB102 websites
France95 websites
Cyprus58 websites
Poland57 websites
Russia51 websites
Canada49 websites
Brazil47 websites

Website Distribution by TLD

Number of websites using CVE-2026-73184
.com828 websites
.org159 websites
.it113 websites
.de86 websites
.co.uk61 websites
.com.br44 websites
.ru40 websites
.pl39 websites
.net36 websites
.fr32 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-73184

Top websites that are affected by CVE-2026-73184. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**************.org United States***,***
********.com Canada***,***
********************.com United States***,***
**********.com Italy***,***
***.***.cy Cyprus***,***
**********.com United States***,***
**********.hu Hungary***,***
***********.org United States***,***
*******.gallery Iran***,***
******.es Spain***,***
See full domain list

FAQ

CVE-2026-73184 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Global Gallery
A total of 2,061 websites have been identified as vulnerable to CVE-2026-73184, based on global website indexing conducted by WebTechSurvey.
The Global Gallery is affected by the CVE-2026-73184 vulnerability.
Global Gallery versions up to and including 11.1.2 are vulnerable to CVE-2026-73184.