CVE-2014-8375

SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL commands via the selectedgroup parameter in a gbajaxgetgroup action to wp-admin/admin-ajax.php...

PT-2014-8498

Name of the Vulnerable Software and Affected Versions GB Gallery Slideshow plugin version 1.5 Description The issue allows remote administrators to execute arbitrary SQL commands. This is achieved by exploiting the selected group parameter in a gb ajax get group action to the...