Threat Investigation
Request a demo

CVE-2021-24915

Critical

Description

The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the list of all users registered on the blog, including their username and email address

SeverityCritical
CVSS9.8
Exploit probability—
ProductContest Gallery
PublishedNov 29, 2021
First seenNov 29, 2021
Weakness typeCWE-89SQL injection

How to fix

Update
  • contest_gallery contest_gallery13.1.0.6 or later

Affected products

ProductAffected versionsFixed in
contest_gallery contest_galleryv < 13.1.0.613.1.0.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.