Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Competition Plugin for WordPress

Information

Software Type Plugin
Software Slug contest-gallery (view on wordpress.org)
Software Status Active
Software Author contest-gallery
Software Downloads 322,677
Software Active Installs 1,000
Software Record Last Updated May 1, 2024

Showing 21-30 of 30 Vulnerabilities

Contest Gallery <= 19.1.5 - Unauthenticated SQL Injection via user_id
8.1
CVE-2022-4156
Dec 5, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_activate and cg_deactivate
7.5
CVE-2022-4163
Nov 29, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id
7.5
CVE-2022-4151
Nov 29, 2022
Researchers: Kunal Sharma, Daniel Krohmer
Contest Gallery <= 13.1.0.9 - Cross-Site Scripting
6.1
CVE-2022-45848
Nov 23, 2022
Researcher: thiennv
Contest Gallery <= 17.0.4 - Authenticated (Author+) SQL Injection
8.8
CVE-2022-36394
Aug 9, 2022
Researcher: Nguy Minh Tuan
Contest Gallery – Files Upload and Contest Plugin for WordPress <= 17.0.4 - Admin+ SQL Injection
7.2
CVE ID Unknown
Jun 1, 2022
Researchers:
Contest Gallery – Photo Contest Plugin for WordPress <= 13.1.0.5 - SQL Injection
9.8
CVE-2021-24915
Apr 13, 2022
Researcher: Tyler Miller
Contest Gallery <= 13.1.0.9 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2022-27853
Dec 20, 2021
Researcher: Ngo Van Thien
Contest Gallery < 13.1.0.7 - Authenticated Email Address Disclosure
4.3
CVE ID Unknown
Nov 1, 2021
Researcher: WPScanTeam
Contest Gallery – Photo Contest Plugin for WordPress <= 10.4.4 - Cross-Site Request Forgery
8.8
CVE-2019-5974
Jun 12, 2019
Researcher: Okazawa Yoshihiro
Title CVE ID CVSS Researchers Date
Contest Gallery <= 19.1.5 - Unauthenticated SQL Injection via user_id CVE-2022-4156 8.1 Kunal Sharma, Daniel Krohmer December 5, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_activate and cg_deactivate CVE-2022-4163 7.5 Kunal Sharma, Daniel Krohmer November 29, 2022
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id CVE-2022-4151 7.5 Kunal Sharma, Daniel Krohmer November 29, 2022
Contest Gallery <= 13.1.0.9 - Cross-Site Scripting CVE-2022-45848 6.1 thiennv November 23, 2022
Contest Gallery <= 17.0.4 - Authenticated (Author+) SQL Injection CVE-2022-36394 8.8 Nguy Minh Tuan August 9, 2022
Contest Gallery – Files Upload and Contest Plugin for WordPress <= 17.0.4 - Admin+ SQL Injection 7.2 June 1, 2022
Contest Gallery – Photo Contest Plugin for WordPress <= 13.1.0.5 - SQL Injection CVE-2021-24915 9.8 Tyler Miller April 13, 2022
Contest Gallery <= 13.1.0.9 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2022-27853 6.4 Ngo Van Thien December 20, 2021
Contest Gallery < 13.1.0.7 - Authenticated Email Address Disclosure 4.3 WPScanTeam November 1, 2021
Contest Gallery – Photo Contest Plugin for WordPress <= 10.4.4 - Cross-Site Request Forgery CVE-2019-5974 8.8 Okazawa Yoshihiro June 12, 2019

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation