CVE-2024-8436

The CVE CVE-2024-8436 affects the WP Easy Gallery – WordPress Gallery Plugin and is an authenticated SQL Injection vulnerability in versions up to 4.8.5. Exploitation requires subscriber-level access or higher and targets the edit_imageId and edit_imageDelete parameters, where insufficient escapi...

CVE-2024-8437

The CVE-2024-8437 entry concerns WP Easy Gallery – WordPress Gallery Plugin (vulnerable 4.8.5).

CVE-2024-9018

CVE-2024-9018 affects WP Easy Gallery – WordPress Gallery Plugin. The vulnerability is a time-based SQL Injection via the key parameter in all versions up to and including 4.8.5, caused by insufficient escaping and inadequate preparation of the SQL query. Exploitation requires authenticated acces...