WP Easy Gallery – WordPress Gallery Plugin vulnerabilities

2 known vulnerabilities in WP Easy Gallery – WordPress Gallery Plugin from Hahncgdev. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WP Easy Gallery – WordPress Gallery Plugin: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-9018Oct 1, 2024Hahncgdev

  The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘key’ parameter in all versions up to, and including, 4.8.5 due to insufficient escaping on the user supplied parameter and lack of sufficient

• 9.9 Critical severity

  WP Easy Gallery – WordPress Gallery Plugin: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-8436Sep 25, 2024Hahncgdev

  The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'edit_imageId' and 'edit_imageDelete' parameters in all versions up to, and including, 4.8.5 due to insufficient escaping on the user supplied parameter