WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Image Gallery-Grid Gallery plugin 1.1.1 and earlier versions have a cross-site scripting vulnerability that stems from not cleaning and escaping some of its Image fields, an attacker can exploit this vulnerability to perform cross-site scripting attacks.