Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress 19.1.4.1

  • Severity: high-risk
  • Status: Fixed
  • Publication: December 5, 2022

The Contest Gallery plugin for WordPress has a security issue in versions up to 19.1.4.1. People with author-level privileges or higher can use this issue to get sensitive information from the database. This is possible because the plugin does not properly escape user input and it does not properly prepare the existing SQL query.

Detected in:

Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress fixed vulnerable versions: >= * <= 19.1.4.1
Contest Gallery – Upload, Vote & Sell with PayPal and Stripe fixed vulnerable versions:
Contest Gallery Pro fixed vulnerable versions: >= * <= 19.1.4.1
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress fixed vulnerable versions:
Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress fixed vulnerable versions:
Photos, Files, YouTube, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI fixed vulnerable versions:
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.