2 matches found
CVE-2022-4158: Undefined Security Weakness
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgFields POST parameter before concatenating it to an SQL query in users-registry-check-registering-and-login.php. This may allow malicious visitors to leak sensitive...
7.5CVSS5.7AI score0.00962EPSS
SaveExploits2References2
WordPress Plugin Contest Gallery SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
7.5CVSS7.4AI score0.00962EPSS
SaveExploits2References3
20