high7.2
CVE-2016-10940
The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.
Impact
The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zm-Gallery Project | Zm-Gallery | Version 1.0 |