Skip to content
OpenAdvisories

Vendor

pasyuk

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameter

    The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation …