CVE-2017-1002015
CriticalSummary
Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2, involving blind SQL injection in image-gallery-with-slideshow/admin_setting.php via the selectMulGallery parameter.
Risk Assessment
An attacker could exploit this vulnerability to gain access to the database, potentially leading to the disclosure of sensitive information or data manipulation.
Recommendation
It is recommended to update the plugin to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in WordPress plugin image-gallery-with-slideshow v1.5.2
See all- CVE-2017-1002014Critical
Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2, involving blind SQL injection in admin_setting.php via the gallery_name parameter.
- CVE-2017-1002013Critical
The WordPress plugin 'image-gallery-with-slideshow' version 1.5.2 has a vulnerability to blind SQL Injection via the imgid parameter in image-gallery-with-slideshow/admin_setting.php.
- CVE-2017-1002012Critical
Vulnerability in the WordPress plugin 'image-gallery-with-slideshow' version 1.5.2 is due to the lack of input sanitization from the gid variable before it is used in an SQL statement.
Original NVD description (English source)
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin_setting.php via selectMulGallery parameter.