WP Easy Gallery – WordPress Gallery Plugin, f55605a14004ca6c080eceedd992e8adb89d1740
- CVE, Research URL
- Application
- Published on
- May 15, 2015
- Research Description
- WP Easy Gallery – WordPress Gallery Plugin [wp-easy-gallery] < 2.7.1 (closed) WordPress WP Easy Gallery Plugin <= 2.7 - SQL Injection This plugin is prone to SQL injection via admin/overview.php galleryId parameter and admin/add-images.php multiple parameter. Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Update the plugin.
- Affected versions
-
max 2.7.1.
- Status
-
vulnerable