[ Vendor · 4 CVEs ]
Syed Balkhi
CVEs affecting Syed Balkhi published in the last 30 days, plus any Syed Balkhi CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104079 | 9 Oct 2026 | CVSS 4.3 | Syed Balkhi Envira GalleryEnvira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged… | |
| CVE-2026-104394 | 6 Oct 2026 | CVSS 7.1 | Syed Balkhi CharitableUnauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions. | |
| CVE-2026-94123 | 30 Sep 2026 | CVSS 7.5 | Syed Balkhi NextGEN GalleryUnauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions. | |
| CVE-2026-95522 | 23 Sep 2026 | CVSS 7.6 | Syed Balkhi Easy Digital DownloadsShop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions. |