Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query.
CVSS 3.0CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.02024·Published 2017-09-14·Fixed in 1.0CWE-89