538 matches found
CVE-2022-4151
The CVE-2022-4151 entry concerns the Contest Gallery WordPress plugin (and Contest Gallery Pro) prior to 19.1.5.1, where the option_id GET parameter is not escaped before being concatenated into an SQL query in export-images-data.php. This SQL injection could allow a user with at least author pri...
CVE-2022-4159 Contest Gallery < 19.1.5.1 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgid POST parameter before concatenating it to an SQL query in 0change-gallery.php. This may allow malicious users with at least author privilege to leak sensitive...
CVE-2022-4151 Contest Gallery < 19.1.5 - Admin+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the optionid GET parameter before concatenating it to an SQL query in export-images-data.php. This may allow malicious users with at least author privilege to leak sensitive...
CVE-2022-4152 Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5, Contest Gallery Pro WordPress plugin before 19.1.5 do not escape the optionid POST parameter before concatenating it to an SQL query in edit-options.php. This may allow malicious users with at least author privilege to leak sensitive information...
CVE-2022-4152
Contest Gallery WordPress plugin < 19.1.5 and Contest Gallery Pro
CVE-2022-4152 Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5, Contest Gallery Pro WordPress plugin before 19.1.5 do not escape the optionid POST parameter before concatenating it to an SQL query in edit-options.php. This may allow malicious users with at least author privilege to leak sensitive information...
CVE-2022-4162
The CVE-2022-4162 issue affects Contest Gallery WordPress plugin versions prior to 19.1.5.1 and Contest Gallery Pro prior to 19.1.5.1. The root cause is failure to escape the cg_row POST parameter before it is concatenated into an SQL query in 3_row-order.php, enabling an authenticated user with ...
CVE-2022-4162 Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgrow POST parameter before concatenating it to an SQL query in 3row-order.php. This may allow malicious users with at least author privilege to leak sensitive information...
CVE-2022-4164 Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgmultiplefilesforpost POST parameter before concatenating it to an SQL query in 0change-gallery.php. This may allow malicious users with at least author privilege to leak...
CVE-2022-4164 Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgmultiplefilesforpost POST parameter before concatenating it to an SQL query in 0change-gallery.php. This may allow malicious users with at least author privilege to leak...
CVE-2022-4164
CVE-2022-4164 affects Contest Gallery WordPress plugin before 19.1.5.1 and Contest Gallery Pro before 19.1.5.1. The root cause is failure to escape the cg_multiple_files_for_post POST parameter when building an SQL query in 0_change-gallery.php, enabling an attacker with at least author privilege...
CVE-2022-4156 Contest Gallery < 19.1.5.1 - Unauthenticated SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the userid POST parameter before concatenating it to an SQL query in ajax-functions-backend.php. This may allow malicious users with at least author privilege to leak sensitive...
CVE-2022-4156
The CVE-2022-4156 issue affects Contest Gallery WordPress plugin versions prior to 19.1.5.1 (and Contest Gallery Pro before 19.1.5.1). The root cause is failure to escape the user_id POST parameter before concatenating it into an SQL query in ajax-functions-backend.php, enabling an unauthenticate...
CVE-2022-4156 Contest Gallery < 19.1.5.1 - Unauthenticated SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the userid POST parameter before concatenating it to an SQL query in ajax-functions-backend.php. This may allow malicious users with at least author privilege to leak sensitive...
CVE-2022-4163 Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgdeactivate and cgactivate POST parameters before concatenating it to an SQL query in 2deactivate.php and 4activate.php, respectively. This may allow malicious users with ...
CVE-2022-4154
The CVE-2022-4154 entry concerns the Contest Gallery Pro WordPress plugin prior to 19.1.5, where management-show-user.php does not escape the wp_user_id GET parameter before concatenating it into an SQL query. This SQL injection could allow malicious users with administrator privileges (e.g., on ...
CVE-2022-4154 Contest Gallery Pro < 19.1.5 - Admin+ SQL Injection
The Contest Gallery Pro WordPress plugin before 19.1.5 does not escape the wpuserid GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with at administrator privileges i.e. on multisite WordPress configurations to leak sensitive...
CVE-2022-4163
CVE-2022-4163 affects the Contest Gallery WordPress plugin (pre-19.1.5.1) and Contest Gallery Pro (pre-19.1.5.1). The root cause is failure to escape the cg_deactivate and cg_activate POST parameters before concatenating them into SQL queries in 2_deactivate.php and 4_activate.php, enabling a use...
CVE-2022-4163 Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgdeactivate and cgactivate POST parameters before concatenating it to an SQL query in 2deactivate.php and 4activate.php, respectively. This may allow malicious users with ...
CVE-2022-4166 Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4activate.php. This may allow malicious users with at least author privilege to leak sensitive informati...