critical9.8
CVE-2016-10889
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.
Impact
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imagely | Nextgen Gallery | before 2.1.57 |