CVE-2022-36394 WordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated author+ SQL Injection SQLi vulnerability in Contest Gallery plugin = 17.0.4 at WordPress...

CVE-2022-36394

CVE-2022-36394 affects WordPress Contest Gallery plugin versions ≤ 17.0.4. The vulnerability is an authenticated SQL Injection (author+) caused by unsanitised/escaped inputs in SQL statements, exploitable by users with author+ privileges. The impact, as described in the sources, includes a high-s...

arnoldkleingallery.com Cross Site Scripting vulnerability OBB-2858977

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress plugin Gallery PhotoBlocks 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2022-23351 · WordPress · Contest Gallery

Name of the Vulnerable Software and Affected Versions: Contest Gallery plugin versions = 17.0.4 Description: The issue is an authenticated SQL Injection vulnerability, affecting the Contest Gallery plugin at WordPress. This allows for SQL injection attacks when an attacker has author or higher...

WordPress plugin Video Gallery 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An authorization issue vulnerability exists...

PT-2022-23293 · Wpchill · Wpchill Gallery Photoblocks

Name of the Vulnerable Software and Affected Versions: WPChill Gallery PhotoBlocks plugin versions 1.2.6 and earlier Description: The issue is related to Cross-Site Request Forgery CSRF vulnerabilities. This means an attacker could potentially trick a user into performing unintended actions on a...

PT-2022-4433 · WordPress · Yotuwp Video Gallery

Name of the Vulnerable Software and Affected Versions: yotuwp Video Gallery plugin versions 1.3.4.5 and earlier Description: The issue is related to a Broken Authentication vulnerability in the yotuwp Video Gallery plugin for WordPress. This vulnerability is associated with weaknesses in the...

WordPress plugin Contest Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

WordPress Video Gallery plugin <= 1.3.4.5 - Broken Authentication

Broken Authentication leading to cache delete discovered by Muhammad Daffa Patchstck Alliance in WordPress Video Gallery plugin versions = 1.3.4.5. Solution Update the WordPress Video Gallery plugin to the latest available version at least 1.3.5...

MAL-2022-217 Malicious code in @dungnt11/gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f7288da3105793b6c8f502b2bb1651a2c81d188f6a99f66377c769bbe6b8378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dungnt11/gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f7288da3105793b6c8f502b2bb1651a2c81d188f6a99f66377c769bbe6b8378 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress All In One Video Gallery Plugin 2.5.8 to 2.6.0 - Unauthenticated Arbitrary File Download & SSRF vulnerability

Unauthenticated Arbitrary File Download & SSRF vulnerability discovered by Gabriele Zuddas in All-in-One Video Gallery Plugin versions 2.5.8 to 2.6.0 Solution Update the WordPress All-in-One Video Gallery plugin to the latest available version at least 2.6.1...

All-in-One Video Gallery 2.5.8 - 2.6.0 - Unauthenticated Arbitrary File Download & SSRF

The plugin does not validate the dl parameter which could allow unauthenticated users to download arbitrary files from the server, as well as perform SSRF attacks...

WordPress Plugin simple-photo-gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

WordPress plugin Robo Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Photo Gallery plugin <= 1.7.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScan in WordPress Photo Gallery plugin versions = 1.7.0. Solution Update the WordPress Photo Gallery by 10Web plugin to the latest available version at least 1.7.1...

Gallery PhotoBlocks <= 1.2.6 - Cross-Site Request Forgery

The plugin does not have CSRF check in some places, which could allow attackers to make logged in users perform unwanted actions...

Gallery PhotoBlocks <= 1.2.6 - Authenticated Stored XSS

The plugin does not sanitise and escape some parameters, which could allow low privileged users to perform Stored Cross-Site Scripting attacks...

WordPress Gallery PhotoBlocks plugin <= 1.2.7 - Cross-Site Request Forgery (CSRF) vulnerabilities

Cross-Site Request Forgery CSRF vulnerabilities leading to Gallery Delete / Copy discovered by Ngo Van Thien Patchstack Alliance in WordPress Gallery PhotoBlocks plugin versions = 1.2.7. Solution Deactivate and delete. This plugin has been closed as of August 10, 2022 and is not available for...