critical9.8
CVE-2019-14314
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress.
Impact
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imagely | Nextgen Gallery | before 3.2.10 |
Weakness classification
References
- NVD record
- CVE.org record
- https://de.wordpress.org/plugins/nextgen-gallery/#developers
- https://wordpress.org/plugins/nextgen-gallery/#developers
- https://wpvulndb.com/vulnerabilities/9816
- https://de.wordpress.org/plugins/nextgen-gallery/#developers
- https://wordpress.org/plugins/nextgen-gallery/#developers
- https://wpvulndb.com/vulnerabilities/9816