Photo Gallery by 10Web – Mobile-Friendly Image Gallery vulnerabilities

2 known vulnerabilities in Photo Gallery by 10Web – Mobile-Friendly Image Gallery from Photo Gallery by 10Web – Mobile-Friendly Image Gallery. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Photo Gallery by 10Web – Mobile-Friendly Image…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-1281May 2, 2022Photo Gallery by 10Web – Mobile-Friendly Image GalleryEPSS 43.4%

  The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_POST['filter_tag'] parameter, which is appended to an SQL query, making SQL Injection attacks possible.

• 9.8 Critical severity

  Photo Gallery by 10Web – Mobile-Friendly Image…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-0169Mar 14, 2022Photo Gallery by 10Web – Mobile-Friendly Image GalleryEPSS 74.6%

  The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statement via the bwg_frontend_data AJAX action (available to unauthenticated and authenticated users), lea