Security Advisory

CVE-2014-8375

6.5

Vulnerability Description

SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL commands via the selected_group parameter in a gb_ajax_get_group action to wp-admin/admin-ajax.php.
Published Date October 21, 2014
Official Source NIST NVD Advisory