CVE-2025-69084 gt3themes CVE debrief

Who should care

Defenders responsible for WordPress installations with the gt3themes Photo Gallery plugin should assess exposure and prioritize updates or mitigations.

Why it matters

Defenders should care about CVE-2025-69084 because it allows for Reflected XSS attacks against users of the gt3themes Photo Gallery plugin for WordPress. This vulnerability can lead to various operational impacts, including potential for Reflected XSS attacks, exposure of sensitive data or session hijacking, defacement of websites or injection of malicious content, and possible disruption of website functionality. Defenders responsible for WordPress installations with this plugin should assess exposure and prioritize updates or mitigations.

• Potential for Reflected XSS attacks
• Exposure of sensitive data or session hijacking
• Defacement of websites or injection of malicious content
• Possible disruption of website functionality

Technical summary

The gt3themes Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-site Scripting (XSS) attacks. The vulnerability affects versions from n/a through 2.7.7.26. This issue allows for Reflected XSS attacks against users of the gt3themes Photo Gallery plugin for WordPress. Defenders should prioritize verifying exposure of the Photo Gallery plugin in their environments and updating to a patched version if available.

Defensive priority

Defenders should prioritize verifying exposure of the Photo Gallery plugin in their environments and updating to a patched version if available.

Recommended defensive actions

• Verify exposure of the Photo Gallery plugin in your environment
• Update to a patched version if available
• Monitor for potential XSS attacks

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score of 7.1 and severity of HIGH. The gt3themes Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-site Scripting (XSS) attacks. The vulnerability affects versions from n/a through 2.7.7.26. There is no evidence of exploitation in the wild. Defenders should verify exposure of the Photo Gallery plugin in their environments and update to a patched version if available.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.