Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Gallery by BestWebSoft 4.7.0 Clear all filters
TI-2023-00725 CVE-2023-0765 · GHSA-hxq8-74m8-v4vh

Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection

Priority HIGH 73

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00873 Published 2023-04-17 Fixed in 4.7.0 CWE-89
TI-2023-00724 CVE-2023-0764 · GHSA-52x4-hjxq-qrcm

Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting

Priority MEDIUM 58

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00444 Published 2023-04-17 Fixed in 4.7.0