CVE-2022-0826 WP Video Gallery <= 1.7.1 - Unauthenticated SQLi

2022-05-0916:50:35

CWE-89

WPScan

www.cve.org

0.04 Low

EPSS

Percentile

92.2%

JSON

The WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

CNA Affected

[
  {
    "product": "WP Video Gallery",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.7.1",
        "status": "affected",
        "version": "1.7.1",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/7a3eed3b-c643-4e24-b833-eba60ab631c5

0.04 Low

EPSS

Percentile

92.2%

JSON

Related for CVELIST:CVE-2022-0826