CVE-2019-14314

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...

WordPress gallery-photo-gallery plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. gallery-photo-gallery is a responsive gallery plugin used in it. A SQL injection vulnerability exists in the WordPress...

Nextgen Gallery < 3.2.11 - SQL Injection

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a SQL Injection security vulnerability...

CVE-2019-14314

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...

WordPress Nextgen Gallery plugin <= 3.2.8 - SQL Injection vulnerability

SQL Injection vulnerability found by Tin Duong Fortinet FortiGuard Labs in WordPress Nextgen Gallery plugin versions = 3.2.8. Solution Update the WordPress Nextgen Gallery plugin to the latest available version at least 3.2.10...

CVE-2013-7482

The reflex-gallery plugin before 1.4.3 for WordPress has XSS...

Cross site scripting

The reflex-gallery plugin before 1.4.3 for WordPress has XSS...

CVE-2016-10921

The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection...

CVE-2016-10918

The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF...

Sql injection

The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection...

CVE-2013-7482

The reflex-gallery plugin before 1.4.3 for WordPress has XSS...

CVE-2013-7482

The CVE-2013-7482 entry concerns the Reflex Gallery WordPress plugin, with the affected component being the reflex-gallery plugin for WordPress. Multiple connected sources confirm a cross-site scripting (XSS) vulnerability present in versions prior to 1.4.3. The Red Hat entry and CNVD/CVE records...

CVE-2016-10921

The CVE-2016-10921 entry concerns the Gallery Photo Gallery WordPress plugin, affected versions prior to 1.0.1. The root cause is a SQL injection due to lack of validation of externally supplied SQL statements in a database-based operation. Impact stated across sources indicates the vulnerability...

CVE-2016-10918

CVE-2016-10918 affects the WordPress gallery-by-supsystic plugin prior to version 1.8.6. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in this plugin, with the root cause described across connected documents as insufficient verification of request origin. Impact is described as P...

CVE-2015-9327

The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS...

Cross site scripting

The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS...

CVE-2015-9327

The CVE-2015-9327 entry maps to a XSS vulnerability in the Flickr Justified Gallery WordPress plugin prior to version 3.4.0. Multiple connected sources (NVD, Red Hat advisory, CVE lists, and WPVulndb) validate that the flaw is a cross-site scripting issue in this plugin, affecting WordPress envir...

CVE-2015-9327

The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS...

Image gallery suffers from denial of service vulnerability (CNVD-2019-30300)

Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...

Image gallery suffers from denial of service vulnerability (CNVD-2019-30306)

Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...