Photo Gallery WordPress v1.6.3 - SQL Injection

Photo Gallery WordPress plugin v1.6.3 contains a SQL injection caused by improper escaping of $POST'filtertag' parameter in SQL queries, letting attackers execute arbitrary SQL commands, exploit requires sending crafted POST requests. id: CVE-2022-1281 info: name: Photo Gallery WordPress v1.6.3 -...

VulnCheck KEV: CVE-2022-1281

The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $POST'filtertag' parameter, which is appended to an SQL query, making SQL Injection attacks possible...

WordPress Photo Gallery Plugin SQL Injection (CVE-2022-1281)

A SQL injection vulnerability exists for the Photo Gallery plugin for WordPress. This vulnerability is due to improper input validation for the filtertag parameter...

CVE-2022-1281

creationtimestamp| type| source ---|---|--- 2022-05-02 20:28:25+00:00| seen| https://t.me/cibsecurity/41752 2025-02-19 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqlmmh25 2026-08-19 15:00:13+00:00| confirmed|...

CVE-2022-1281

The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $POST'filtertag' parameter, which is appended to an SQL query, making SQL Injection attacks possible...

CVE-2022-1281 Photo Gallery < 1.6.3 - Unauthenticated SQL Injection

The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $POST'filtertag' parameter, which is appended to an SQL query, making SQL Injection attacks possible...