Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress 19.1.5

  • Severity: high-risk
  • Status: Fixed
  • Publication: December 5, 2022

The Contest Gallery (Pro) plugin for WordPress is not secure in versions up to 19.1.5. People who have an account with author-level privileges or higher can use this to get sensitive information from the database. This happens because the plugin is not properly protecting the user supplied information and not properly preparing existing SQL queries.

Detected in:

Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress fixed vulnerable versions: >= * <= 19.1.5
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe fixed vulnerable versions:
Contest Gallery Pro fixed vulnerable versions: >= * <= 19.1.5
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress fixed vulnerable versions:
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress fixed vulnerable versions:
Photos, Files, YouTube, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.