Photo Gallery by 10Web – Mobile-Friendly Image Gallery vulnerabilities
We track 2 vulnerabilities in Photo Gallery by 10Web – Mobile-Friendly Image Gallery products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2022.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Photo Gallery by 10Web – Mobile-Friendly Image Gallery vulnerabilities
- 9.8 Critical severity
Photo Gallery by 10Web – Mobile-Friendly Image…: Improper Neutralization of Special Elements used in an SQL Command
The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_POST['filter_tag'] parameter, which is appended to an SQL query, making SQL Injection attacks possible.
- 9.8 Critical severity
Photo Gallery by 10Web – Mobile-Friendly Image…: Improper Neutralization of Special Elements used in an SQL Command
The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statement via the bwg_frontend_data AJAX action (available to unauthenticated and authenticated users), lea