CVE-2017-14125

Critical

Published: 25/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Responsive Image Gallery plugin before version 1.2.1 for WordPress has an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the 'id' parameter in an add_edit_theme task on the wpdevart_gallery_themes page in the admin panel.

Risk Assessment

Attackers may gain access to the database, potentially leading to data theft or system compromise.

Recommendation

It is recommended to update the Responsive Image Gallery plugin to version 1.2.1 or later to mitigate this vulnerability.

Original NVD description (English source)

SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an add_edit_theme task in the wpdevart_gallery_themes page to wp-admin/admin.php.