Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress 19.1.4.1

  • Severity: high-risk
  • Status: Fixed
  • Publication: December 5, 2022

The Contest Gallery plugin for WordPress is not secure in certain versions up to 19.1.4.1. This means that people who can log into the WordPress site with author-level or higher access can take advantage of the vulnerability to get sensitive information from the database. The vulnerability is caused by not properly securing the user-supplied option_id GET parameter

Detected in:

Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress fixed vulnerable versions: >= * <= 19.1.4.1
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe fixed vulnerable versions:
Contest Gallery Pro fixed vulnerable versions: >= * <= 19.1.4.1
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress fixed vulnerable versions:
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress fixed vulnerable versions:
Photos, Files, YouTube, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.