WordPress Gallery Plugin – NextGEN Gallery, CVE-2019-14314
- CVE, Research URL
- Application
- Published on
- Aug 27, 2019
- Research Description
- A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php.
- Affected versions
-
Min -, max 3.2.11.
- Status
-
vulnerable