WordPress CVEs

Description

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin (https://wordpress.org/plugins/slider-bws/) must also be installed for this vulnerability to be exploitable.

Affected WordPress components

• Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress Plugin · gallery-plugin
  Confirmed match Active
  Before 4.7.0
  View on WordPress.org
• gallery Plugin · gallery
  Possible match Homeless
  Before 4.7.0
  View on WordPress.org
• gallery Theme · gallery
  Possible match Homeless
  Before 4.7.0
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• Unknown Gallery by BestWebSoft — Before 4.7.0
• bestwebsoft gallery — Before 4.7.0

References

• wpscan.com https://wpscan.com/vulnerability/2699cefa-1cae-4ef3-ad81-7f3db3fcce25 Exploit, Third Party Advisory
• nvd.nist.gov Official NVD record