The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before using it in an SQL statement, leading to…
CVSS 3.1HIGH 8.1·Network·Low privileges·No interaction·EPSS 0.01168·Published 2021-10-04·Fixed in 4.1.9CWE-89