Security Advisory

CVE-2022-0826

9.8
CRITICAL

Vulnerability Description

The WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users
Published Date May 9, 2022
Official Source NIST NVD Advisory