PG
Product
Photo Gallery
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 5Medium 36Low 1
Watch
Add Photo Gallery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-1281 | 9.8 | May 2 | The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_POST['filter_tag'] parameter, which is appended to an SQL query, making SQL Injection attacks… Affected: through 1.6.3 |
| CVE-2022-0169 | 9.8 | Mar 14 | The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statement via the… Affected: before 1.6.0 |
| CVE-2021-24139 | 9.8 | Mar 18 | Unvalidated input in the Photo Gallery (10Web Photo Gallery) WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwg_search_x… Affected: before 1.5.55 |
| CVE-2019-16119 | 9.8 | Sep 8 | SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album_id parameter Affected: before 1.5.35 |
| CVE-2019-14313 | 9.8 | Jul 30 | A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress Affected: before 1.5.31 |
Showing 5