CVE-2017-1002013
CriticalSummary
The WordPress plugin 'image-gallery-with-slideshow' version 1.5.2 has a vulnerability to blind SQL Injection via the imgid parameter in image-gallery-with-slideshow/admin_setting.php.
Risk Assessment
An attacker could exploit this vulnerability to execute unauthorized queries against the database, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update the plugin to the latest version to mitigate this vulnerability.
Other vulnerabilities in WordPress plugin image-gallery-with-slideshow v1.5.2
See all- CVE-2017-1002015Critical
Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2, involving blind SQL injection in image-gallery-with-slideshow/admin_setting.php via the selectMulGallery parameter.
- CVE-2017-1002014Critical
Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2, involving blind SQL injection in admin_setting.php via the gallery_name parameter.
- CVE-2017-1002012Critical
Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2 is due to the lack of input sanitization from the gid variable before it is used in an SQL statement.
Original NVD description (English source)
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slideshow/admin_setting.php.