hahncgdev

Products

ProductCVEsExploitedLatest
WP Easy Gallery – WordPress Gallery Plugin3–Oct 1, 2024

Exploited and recent CVEs

  • CVE-2024-9018 High 8.8 WP Easy Gallery <= 4.8.5 - Authenticated (Contributor+) SQL Injection via key Parameter 0.5%
  • CVE-2024-8436 Critical 9.9 WP Easy Gallery – WordPress Gallery Plugin <= 4.8.5 - Authenticated (Subscriber+) SQL Injection 0.5%
  • CVE-2024-8437 Medium 4.3 WP Easy Gallery – WordPress Gallery Plugin <= 4.8.5 - Missing Authorization to Authenticated (Subscriber+) Gallery Manipulation 0.3%