| Package | Affected versions | Patched versions |
|---|---|---|
| photo gallery | ≤ 1.6.3 |
The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_POST['filter_tag'] parameter, which is appended to an SQL query, making SQL Injection attacks possible.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free