CVE-2022-0826

WP Video Gallery <= 1.7.1 - Unauthenticated SQLi

State: Published
Severity: Not scored
Published: May 9, 2022
Updated: Aug 2, 2024
Reserved: Mar 2, 2022

Description

The WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

Scores

The record has no CVSS score.

Weaknesses

CWE-89 SQL Injection

Affected Products

Product	Versions
WP Video GalleryUnknown	1.7.1 through 1.7.1Affected

References

https://wpscan.com/vulnerability/7a3eed3b-c643-4e24-b833-eba60ab631c5

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.