Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress 19.1.4.1

  • Severity: high-risk
  • Status: Fixed
  • Publication: December 5, 2022

The Contest Gallery plugin for WordPress is not secure in versions up to 19.1.4.1. This means that people who are logged into the website with author-level privileges or higher can access sensitive information from the database. This is possible because the plugin does not protect user supplied data and does not properly prepare existing SQL queries.

Detected in:

Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress fixed vulnerable versions: >= * <= 19.1.4.1
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe fixed vulnerable versions:
Contest Gallery Pro fixed vulnerable versions: >= * <= 19.1.4.1
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress fixed vulnerable versions:
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress fixed vulnerable versions:
Photos, Files, YouTube, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.