Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Photospace Responsive Gallery Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 3 vulnerability records associated with Photospace Responsive Gallery, published between 2019 and 2025.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

3Total records
0Critical
0High
3Medium
0Low
0Informational
2Patched records
1Currently marked unpatched
2019-06-22First disclosure
2025-09-27Latest disclosure
2 of 3CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
201911 records
202311 records
202511 records

Severity Breakdown

SeverityRecordsShare
Medium3100%

Vulnerability-Type Breakdown

Cross-Site Scripting

3 records100%

First: 2019. Latest: 2025.

Patch Status

Patched
2
Currently marked unpatched
1
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 2.2.0
  • 1.1.8

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-2.2.0Photospace Responsive <= 2.2.0 - Authenticated (Author+) Stored Cross-Site ScriptingSeptember 27, 2025Not suppliedMedium
*-2.1.1Photospace Responsive <= 2.1.1 - Authenticated (Administrator+) Stored Cross-Site ScriptingSeptember 12, 20232.2.0Medium
*-1.1.7Photospace Responsive <= 1.1.7 - Cross-Site ScriptingJune 22, 20191.1.8Medium

Selected source records

Latest Records

MediumCVE-2025-62899

Photospace Responsive <= 2.2.0 - Authenticated (Author+) Stored Cross-Site Scripting

Published: September 27, 2025

Affected versions
*-2.2.0
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2023-4271

Photospace Responsive <= 2.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Published: September 12, 2023

Affected versions
*-2.1.1
Patched versions
2.2.0
Original Wordfence record
Medium

Photospace Responsive <= 1.1.7 - Cross-Site Scripting

Published: June 22, 2019

Affected versions
*-1.1.7
Patched versions
1.1.8
Original Wordfence record

Highest-Severity Records

Medium

Photospace Responsive <= 1.1.7 - Cross-Site Scripting

Published: June 22, 2019

Affected versions
*-1.1.7
Patched versions
1.1.8
Original Wordfence record
MediumCVE-2025-62899

Photospace Responsive <= 2.2.0 - Authenticated (Author+) Stored Cross-Site Scripting

Published: September 27, 2025

Affected versions
*-2.2.0
Patched versions
Not supplied
Original Wordfence record
MediumCVE-2023-4271

Photospace Responsive <= 2.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Published: September 12, 2023

Affected versions
*-2.1.1
Patched versions
2.2.0
Original Wordfence record

Currently Marked Unpatched Records

MediumCVE-2025-62899

Photospace Responsive <= 2.2.0 - Authenticated (Author+) Stored Cross-Site Scripting

Published: September 27, 2025

Affected versions
*-2.2.0
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory