Detections
Analytics
CVE-2019-14314
critical
Description
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php.
References
https://wpvulndb.com/vulnerabilities/9816
https://wordpress.org/plugins/nextgen-gallery/#developers
https://de.wordpress.org/plugins/nextgen-gallery/#developers