WordPress Plugin Vulnerabilities

Global Flash Galleries - popup.php id Parameter SQL Injection

Description

The global-flash-galleries WordPress plugin was affected by a popup.php id Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
global-flash-galleries
No known fix

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
265371da-12f3-4e13-abd0-38ba70fd0a39

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2015-08-26
Title
Car Rental System <= 3.0 - SQL Injection
Published
2015-01-15
Title
Feedweb 2.4.1-3.0.6 - SQL Injection
Published
2014-08-01
Title
portfolio-slideshow-pro v3 - SQL Injection
Published
2025-06-02
Title
Ultimate Gift Cards for WooCommerce < 3.1.5 - Authenticated (Administrator+) SQL Injection via wps_wgm_save_post Function
Published
2022-02-16
Title
WP Statistics < 13.1.6 - Unauthenticated Blind SQL Injection via current_page_id