WordPress Plugin Vulnerabilities

All Video Gallery 1.1 - config.php Multiple Parameter SQL Injection

Description

The all-video-gallery WordPress plugin was affected by a config.php Multiple Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
all-video-gallery
Fixed in 1.2

References

CVE
CVE-2012-6653

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
a07a4fca-b3c7-47f0-9800-ed82f823154f

Timeline

Publicly Published
2014-09-18 (about 11 years ago)
Added
2014-09-18 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-06-05
Title
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress < 1.7.3 - Authenticated (Author+) SQL Injection
Published
2024-07-18
Title
FV Player < 7.5.47.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter
Published
2025-07-07
Title
Torod <= 1.9 - Unauthenticated SQL Injection
Published
2026-02-27
Title
Tutor LMS < 3.9.7 - Unauthenticated SQL Injection via coupon_code
Published
2014-08-01
Title
myLDlinker - SQL Injection