CVE-2016-11018

The CVE-2016-11018 entry concerns the Huge-IT gallery-images WordPress plugin (pre-1.9.0). The vulnerability is an unauthenticated SQL injection in the image gallery AJAX handler, caused by processing the headers Client-Ip and X-Forwarded-For in gallery-images.php via huge_it_image_gallery_ajax_c...