Description
Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin <= 17.0.4 at WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Contest Gallery | Contest Gallery (WordPress plugin) | <= 17.0.4 – ≤ 17.0.4 | — |
High · 7.6
CVE-2022-36394
EUVD-2022-39107GHSA-r388-2x2x-393f
WordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerability
Published Aug 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack