High
CVE-2022-4162
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 68
Reset filters
High
CVE-2022-4165
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_order
High
CVE-2022-4152
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id GET
Medium
CVE-2022-4154
Contest Gallery Pro <= 19.1.4.1 - Authenticated (Administrator+) SQL Injection via wp_user_id
High
CVE-2022-4161
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_start
High
CVE-2022-4160
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_id
High
CVE-2022-4164
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_multiple_files_for_post
High
CVE-2022-4155
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via wp_user_id
High
CVE-2022-4157
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_option_id
High
CVE-2022-4156
Contest Gallery <= 19.1.5 - Unauthenticated SQL Injection via user_id
High
CVE-2022-4158
Contest Gallery <= 19.1.4.1 - Unauthenticated SQL Injection via cg_Fields
High
CVE-2022-4163
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_activate and cg_deactivate
High
CVE-2022-4151
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id
Medium
CVE-2022-45848
Contest Gallery <= 13.1.0.9 - Cross-Site Scripting
High
CVE-2022-36394
Contest Gallery <= 17.0.4 - Authenticated (Author+) SQL Injection
High
1f9d8bbe-205f-44b6-a0c6-89b9135e6363
Contest Gallery – Files Upload and Contest Plugin for WordPress <= 17.0.4 - Admin+ SQL Injection
Critical
CVE-2021-24915
Contest Gallery – Photo Contest Plugin for WordPress <= 13.1.0.5 - SQL Injection
Medium
CVE-2022-27853
Contest Gallery <= 13.1.0.9 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
7759b209-4211-4ee5-ae7a-42645f5d5e96
Contest Gallery < 13.1.0.7 - Authenticated Email Address Disclosure
High
CVE-2019-5974
Contest Gallery – Photo Contest Plugin for WordPress <= 10.4.4 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.