Input validation vulnerability in Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress 21.3.2

The Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress is not secure in versions up to 21.3.2. This is because the user input is not properly protected and the existing database query is not prepared enough. This means that attackers with contributor-level access or higher can add their own SQL queries to the existing ones, potentially accessing sensitive information from the database.