Critical severity · published Sep 25, 2017
CVE-2017-14125
SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in…
9.8
CVSS
3.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an add_edit_theme task in the wpdevart_gallery_themes page to wp-admin/admin.php.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RI
Responsive Image Gallery Gallery Album · Wpdevart
through 1.2.0 · source: NVD
Affected product
RI
Responsive Image Gallery Gallery Album
Wpdevart
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-14125
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-14125
Exploit
http://seclists.org/fulldisclosure/2017/Sep/55
VDB Entry
https://wpvulndb.com/vulnerabilities/8907
More from Responsive Image Gallery Gallery Album
8.8
CVE-2024-35750
WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - SQL Injection vulnerability
6.3
CVE-2024-37542
WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability
6.1
CVE-2024-30550
WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
5.4
CVE-2023-45631
WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability
5.4
CVE-2024-31120
WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability