← Back

Cp Image Store With Slideshow

cp_image_store_with_slideshow

Vendor: Dwbooster • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Dwbooster
1Cp Image Store With Slideshow
Jun 17, 2026
Jun 8, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allow...Show more
The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated users to perform an SQL injection attackShow less