TI-2024-12715 CVE-2024-13676 · GHSA-qx4j-qqf4-j3ch
Categorized Gallery Plugin <= 2.0 - Authenticated (Contributor+) SQL Injection
Priority LOW 29
The Categorized Gallery Plugin plugin for WordPress is vulnerable to SQL Injection via the 'field' attribute of the 'image_gallery' shortcode in all versions up to, and including, 2.0 due to insufficient escaping on the…