CVEs (1)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Wp Video Gallery Free Project 1Wp Video Gallery Free Jun 17, 2026 May 9, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users |