Contest Gallery Pro (Unknown) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-12-26. Vendor: Unknown.
CVEs of Contest Gallery Pro
- CVE-2022-4159 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_id POST parameter before…
- CVE-2022-4162 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_row POST parameter before…
- CVE-2022-4165 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_order POST parameter before…
- CVE-2022-4158 - CVSS 7.5 (high), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_Fields POST parameter before…
- CVE-2022-4161 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_copy_start POST parameter…
- CVE-2022-4164 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_multiple_files_for_post POST…
- CVE-2022-4157 - CVSS 4.9 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_option_id POST parameter…
- CVE-2022-4160 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_copy_id POST parameter before…
- CVE-2022-4163 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_deactivate and cg_activate…
- CVE-2022-4166 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before…
- CVE-2022-4152 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5, Contest Gallery Pro WordPress plugin before 19.1.5 do not escape the option_id POST parameter before…
- CVE-2022-4155 - CVSS 4.9 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the wp_user_id GET parameter before…
- CVE-2022-4151 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id GET parameter before…
- CVE-2022-4154 - CVSS 4.9 (medium), 2022-12-26: The Contest Gallery Pro WordPress plugin before 19.1.5 does not escape the wp_user_id GET parameter before concatenating it to an SQL query in…
- CVE-2022-4150 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id POST parameter before…
- CVE-2022-4153 - CVSS 6.5 (medium), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the upload[] POST parameter before…
- CVE-2022-4156 - CVSS 7.5 (high), 2022-12-26: The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the user_id POST parameter before…
