CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

RedhatCVE•added 2025/05/22 11:29 p.m.•8 views

CVE-2022-4151

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the optionid GET parameter before concatenating it to an SQL query in export-images-data.php. This may allow malicious users with at least author privilege to leak sensitive...

6.5CVSS6.5AI score0.00854EPSS

SaveExploits2References1

Rapid7 Vulnerability Database (full)•added 2022/12/26 12:00 a.m.•1 views

CVE-2022-4152: Undefined Security Weakness

The Contest Gallery WordPress plugin before 19.1.5, Contest Gallery Pro WordPress plugin before 19.1.5 do not escape the optionid POST parameter before concatenating it to an SQL query in edit-options.php. This may allow malicious users with at least author privilege to leak sensitive information...

6.5CVSS5.8AI score0.00854EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by