Unscored CVE-2017-14125 EUVD-2017-5637GHSA-c2x2-f855-x3hh

SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary …

Published Sep 25, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an add_edit_theme task in the wpdevart_gallery_themes page to wp-admin/admin.php.

References

20170922 WordPress Plugin Responsive Image Gallery 1.1.8 - SQL Injection mailing-list
https://wpvulndb.com/vulnerabilities/8907