WordPress Plugin Vulnerabilities
NextGEN Gallery < 2.1.79 - Unauthenticated SQL Injection
Description
According to the original source, one of the following conditions must be met for exploitation:
1. The use of a NextGEN Basic TagCloud gallery.
2. If users are able to submit posts to be reviewed (contributors).
Affects Plugins
Fixed in 2.1.79 References
Classification
Type
SQLI
OWASP top 10
CWE
CVSS
Miscellaneous
Submitter
ethicalhack3r
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2017-02-27 (about 6 years ago)
Added
2017-02-27 (about 6 years ago)
Last Updated
2021-02-08 (about 2 years ago)
WPScan 