Contest Gallery Pro

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Contest Gallery Pro

Information

Software Type Plugin
Software Slug contest-gallery-pro
Software Status Active
Software Author https://www.contest-gallery.com/
Software Website www.contest-gallery.com

17 Vulnerabilities

Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via upload[]
7.5
CVE-2022-4153
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery (Pro) <= 19.1.5 - SQL Injection via option_id
8.8
CVE-2022-4150
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via addCountS
7.5
CVE-2022-4166
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_row
7.5
CVE-2022-4162
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_order
7.5
CVE-2022-4165
Dec 5, 2022
Researchers: Daniel Krohmer, Kunal Sharma
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id GET
7.5
CVE-2022-4152
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_start
7.5
CVE-2022-4161
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_id
7.5
CVE-2022-4160
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_multiple_files_for_post
7.5
CVE-2022-4164
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via wp_user_id
7.5
CVE-2022-4155
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_option_id
7.5
CVE-2022-4157
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Unauthenticated SQL Injection via cg_Fields
8.1
CVE-2022-4158
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via cg_id
7.5
CVE-2022-4159
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery Pro <= 19.1.4.1 - Authenticated (Administrator+) SQL Injection via wp_user_id
6.6
CVE-2022-4154
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.5 - Unauthenticated SQL Injection via user_id
8.1
CVE-2022-4156
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id
7.5
CVE-2022-4151
Nov 29, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_activate and cg_deactivate
7.5
CVE-2022-4163
Nov 29, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Title CVE ID CVSS Researchers Date
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via upload[] CVE-2022-4153 7.5 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery (Pro) <= 19.1.5 - SQL Injection via option_id CVE-2022-4150 8.8 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via addCountS CVE-2022-4166 7.5 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_row CVE-2022-4162 7.5 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_order CVE-2022-4165 7.5 Daniel Krohmer, Kunal Sharma December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id GET CVE-2022-4152 7.5 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_start CVE-2022-4161 7.5 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_id CVE-2022-4160 7.5 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_multiple_files_for_post CVE-2022-4164 7.5 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via wp_user_id CVE-2022-4155 7.5 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_option_id CVE-2022-4157 7.5 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Unauthenticated SQL Injection via cg_Fields CVE-2022-4158 8.1 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via cg_id CVE-2022-4159 7.5 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery Pro <= 19.1.4.1 - Authenticated (Administrator+) SQL Injection via wp_user_id CVE-2022-4154 6.6 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.5 - Unauthenticated SQL Injection via user_id CVE-2022-4156 8.1 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id CVE-2022-4151 7.5 Kunal Sharma, Daniel Krohmer November 29, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_activate and cg_deactivate CVE-2022-4163 7.5 Kunal Sharma, Daniel Krohmer November 29, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation