Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-47588 EUVD-2022-50348GHSA-cpwc-3mjr-ghgw

WordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection

Published Nov 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tips and Tricks HQ, Peter Petreski Simple Photo Gallery simple-photo-gallery allows SQL Injection.This issue affects Simple Photo Gallery: from n/a through v1.8.1.

Affected products

VendorProductAffectedFixed
Tips and Tricks HQ, Peter Petreski Simple Photo Gallery ≤ v1.8.1 —

References