Skip to content
OpenAdvisories

Product · wamasoftware

Categorized Gallery Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-13676

    Categorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection

    The Categorized Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'field' attribute of the 'image_gallery' shortcode in all versions up to, and including, 2.0 due to insufficient escaping on the user supplied parameter and lack of suf…

    wamasoftware Categorized Gallery Plugin Web / CMS