CVE-2019-14313

CRITICAL 9.8CVE-2019-14313 · Published 30/07/2019 · updated 17/06/2026

In short

CVE-2019-14313 is a CRITICAL (CVSS 9.8) vulnerability affecting photo gallery (10web).
Chance of exploitation in the next 30 days (EPSS): 4.5%, higher than 91.5% of all vulnerabilities.
Fix: update to 1.5.31 or later.

Package	Affected versions	Patched versions
photo gallery 10web	`< 1.5.31`	`1.5.31`

Description

A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via filemanager/model.php.

References

fortiguard.com/zeroday/FG-VD-19-101 · Third Party Advisory
plugins.trac.wordpress.org/changeset/2128378 · Patch
wordpress.org/plugins/photo-gallery · Release Notes
wpvulndb.com/vulnerabilities/9480 · Third Party Advisory

More vulnerabilities in photo gallery

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

photo gallery

10web

< 1.5.31

1.5.31

More vulnerabilities in photo gallery

See all →