Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Apptha Clear all filters
TI-2017-14314 CVE-2017-20250 · GHSA-7jg3-f4j7-jpcg

WordPress Plugin Mac Photo Gallery 3.0 Arbitrary File Download

Priority MEDIUM 45

Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00641 Published 2026-06-09 No fix listed CWE-22
TI-2017-14313 CVE-2017-20249 · GHSA-2fxf-3xpf-7mjf

WordPress Plugin Apptha Slider Gallery 1.0 SQL Injection

Priority HIGH 77

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00295 Published 2026-06-09 No fix listed CWE-89
TI-2017-14312 CVE-2017-20248 · GHSA-4c9c-6hj9-gqpq

WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download

Priority HIGH 77

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00641 Published 2026-06-09 No fix listed CWE-22
TI-2017-14311 CVE-2017-20247 · GHSA-23pq-pv24-pjcg

WordPress Plugin PICA Photo Gallery 1.0 SQL Injection

Priority LOW 38

WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00262 Published 2026-06-09 No fix listed CWE-89
TI-2015-01852 CVE-2015-2065 · GHSA-xcjv-gj29-fmm5

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery…

Priority MEDIUM 60

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parame…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.40085 Published 2015-02-24 No fix listed CWE-89
TI-2014-07391 CVE-2014-9098 · GHSA-px76-mghr-997q

Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery…

Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02875 Published 2014-11-26 No fix listed CWE-79
TI-2014-07390 CVE-2014-9097 · GHSA-287h-m4p8-f58c

Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery…

Priority MEDIUM 41

Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow (1) remote attackers to execute arbitrary SQL…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05017 Published 2014-11-26 No fix listed CWE-89