CVE-2022-36394

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/contest-gallery/wordpress-contest-gallery-plugin-17-0-4-authenticated-sql-injection-sqli-vulnerability · Third Party Advisory
• wordpress.org/plugins/contest-gallery · Release Notes

Lỗ hổng khác của contest gallery

• CVE-2025-3862TRUNG BÌNH 5.4Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and includin…
• CVE-2025-1513TRUNG BÌNH 6.1The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Bu…
• CVE-2025-22693CAO 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery deve…
• CVE-2024-56237TRUNG BÌNH 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery deve…
• CVE-2024-11103NGHIÊM TRỌNG 9.8The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24…