Read the docs

Apptha

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Apptha records in CISA KEV

No Apptha vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contus Video Gallery 2 records MEDIUM Video Gallery Plugin 1 record LOW Wordpress Video Gallery 1 record MEDIUM

Records

8 records

TI-2017-14313 CVE-2017-20249 · GHSA-2fxf-3xpf-7mjf

WordPress Plugin Apptha Slider Gallery 1.0 SQL Injection

Priority HIGH 77

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00295 Published 2026-06-09 No fix listed CWE-89
TI-2017-14312 CVE-2017-20248 · GHSA-4c9c-6hj9-gqpq

WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download

Priority HIGH 77

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00641 Published 2026-06-09 No fix listed CWE-22
TI-2015-01852 CVE-2015-2065 · GHSA-xcjv-gj29-fmm5

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery…

Priority MEDIUM 60

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parame…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.40085 Published 2015-02-24 No fix listed CWE-89
TI-2017-14314 CVE-2017-20250 · GHSA-7jg3-f4j7-jpcg

WordPress Plugin Mac Photo Gallery 3.0 Arbitrary File Download

Priority MEDIUM 45

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00641 Published 2026-06-09 No fix listed CWE-22
TI-2014-07390 CVE-2014-9097 · GHSA-287h-m4p8-f58c

Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery…

Priority MEDIUM 41

Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow (1) remote attackers to execute arbitrary SQL…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05017 Published 2014-11-26 No fix listed CWE-89
TI-2017-14311 CVE-2017-20247 · GHSA-23pq-pv24-pjcg

WordPress Plugin PICA Photo Gallery 1.0 SQL Injection

Priority LOW 38

WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00262 Published 2026-06-09 No fix listed CWE-89
TI-2014-07391 CVE-2014-9098 · GHSA-px76-mghr-997q

Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery…

Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02875 Published 2014-11-26 No fix listed CWE-79
Open these records in search →