Log out
Get PRO

Latest

Input validation vulnerability in WordPress Gallery Plugin – NextGEN Gallery 2.1.77

  • Severity: high-risk
  • Status: Fixed
  • Publication: February 17, 2017

The NextGen Gallery plugin for WordPress has a security vulnerability. This vulnerability can be exploited by unauthenticated attackers. If they gain access, they can get sensitive information from the database. This vulnerability exists in versions up to 2.1.77 due to inadequate escaping of user-supplied parameters and lack of preparation of existing SQL queries.

Detected in:

NextGEN Gallery – Create an Amazing Photo Gallery in Seconds fixed vulnerable versions:
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery fixed vulnerable versions:
WordPress Gallery Plugin – NextGEN Gallery fixed vulnerable versions: >= * <= 2.1.77

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.