Zm-gallery Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Zm-gallery Project records in CISA KEV

No Zm-gallery Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Zm-gallery · all components

TI-2016-08978 CVE-2016-10940 · GHSA-3wpx-9425-3jrg

MEDIUM 40

The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.05446 Published 2019-09-13 No fix listed CWE-89