Lucene search
+L

CVE-2022-1281

🗓️ 02 May 2022 16:05:57Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 117 Views🌐 WEB

The Photo Gallery WordPress plugin through 1.6.3 allows SQL Injection via filter_tag parameter

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2022-1281
2 May 202216:15
attackerkb
circl
Circl
CVE-2022-1281
2 May 202220:28
circl
cnnvd
CNNVD
WordPress plugin Photo Gallery SQL注入漏洞
2 May 202200:00
cnnvd
cnvd
CNVD
WordPress Photo Gallery plugin SQL注入漏洞
7 May 202200:00
cnvd
checkpoint_advisories
Check Point Advisories
WordPress Photo Gallery Plugin SQL Injection (CVE-2022-1281)
9 Nov 202200:00
checkpoint_advisories
cvelist
Cvelist
CVE-2022-1281 Photo Gallery < 1.6.3 - Unauthenticated SQL Injection
2 May 202216:05
cvelist
nuclei
Nuclei
Photo Gallery WordPress v1.6.3 - SQL Injection
7 Sep 202606:34
nuclei
nvd
NVD
CVE-2022-1281
2 May 202216:15
nvd
openvas
OpenVAS
WordPress Photo Gallery Plugin < 1.6.3 Multiple Vulnerabilities
5 May 202200:00
openvas
osv
OSV
CVE-2022-1281
2 May 202216:15
osv
Rows per page
NVD
Node
10webphoto_galleryRange1.6.3wordpress
[
  {
    "product": "Photo Gallery by 10Web – Mobile-Friendly Image Gallery",
    "vendor": "Unknown",
    "versions": [
      {
        "changes": [
          {
            "at": "1.6.3",
            "status": "unaffected"
          }
        ],
        "lessThan": "1.6.3*",
        "status": "affected",
        "version": "1.6.3",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
filter_tagrequest body/wp-admin/admin-ajax.php?image_id=123SQL Injection via unsafely concatenated filter_tag parameter from POST into SQL query.CWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:22Current
9.8High risk
Vulners AI Score9.8
CVSS 27.5
CVSS 3.19.8
EPSS0.43036
117