Skip to content
OpenAdvisories

Vendor

wamasoftware

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Categorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection

    The Categorized Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'field' attribute of the 'image_gallery' shortcode in all versions up to, and including, 2.0 due to insufficient escaping on the user supplied parameter and lack of suf…