Skip to content
OpenAdvisories

Vendor

hahncgdev

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    WP Easy Gallery <= 4.8.5 - Authenticated (Contributor+) SQL Injection via key Parameter

    The WP Easy Gallery – WordPress Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the ‘key’ parameter in all versions up to, and including, 4.8.5 due to insufficient escaping on the user supplied parameter and lack of sufficien…