WordPress Plugin Vulnerabilities

WP Easy Gallery 2.7 - admin/overview.php galleryId Parameter SQL Injection

Description

The WP Easy Gallery – WordPress Gallery Plugin WordPress plugin was affected by an admin/overview.php galleryId Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wp-easy-gallery
Fixed in 2.7.1

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
7907a46e-61ef-4bd8-9598-c0f8f78c0aab

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2015-04-15
Title
Ajax Store Locator <= 1.2 - Remote SQL Injection
Published
2024-01-02
Title
LearnPress < 4.2.5.8 - Unauthenticated SQLi
Published
2014-08-01
Title
GRAND Flash Album Gallery 2.55 - "gid" SQL Injection
Published
2024-12-14
Title
WP Simple Pay Lite Manager <= 1.4 - Authenticated (Administrator+) SQL Injection
Published
2012-11-05
Title
Ajax Post Search <= 1.3 - SQL Injection