| Package | Affected versions | Patched versions |
|---|---|---|
| gb gallery slideshow | = 1.5 |
SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL commands via the selected_group parameter in a gb_ajax_get_group action to wp-admin/admin-ajax.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free