High · 8.5 CVE-2024-31355 EUVD-2024-29251GHSA-vvx7-xv93-4vqx

WordPress Slideshow Gallery LITE plugin <= 1.7.8 - Auth. SQL Injection vulnerability

Published Apr 10, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Tribulant Software Product: Slideshow Gallery

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8.

Affected products

Vendor	Product	Affected	Fixed
Tribulant	Slideshow Gallery	≤ 1.7.8	—

References

https://patchstack.com/database/vulnerability/slideshow-gallery/wordpress-slideshow-gallery-lite-plugin-1-7-8-sql-injection-vulnerability?_s_id=cve vdb-entry