Unrated severityNVD Advisory· Published Jul 23, 2026· Updated Jul 23, 2026
WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65475
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS.
This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30.
Affected products
1- Range: 2.14.25-2.14.30
Patches
Vulnerability mechanics
References
1News mentions
1- Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)Wordfence Blog · Jul 30, 2026