Contest Gallery
Approved changes feed: RSS · Atom
cpe:2.3:a:contest-gallery:contest_gallery:*:*:*:*:pro:wordpress:*:*
part: a version: * update: *
| Vendor | Contest Gallery (050e4911-b598-56c5-9d08-9d371d70bb7e) |
|---|---|
| Product | Contest Gallery (e95154f0-4c0c-53be-a64d-4cb8e0f41398) |
| Edition | * |
| Language | * |
| Software edition | pro |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wpplugins/contest-gallery |
purl2cpe | 2026-06-01 10:16:33.632124 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-4166 |
vulnerable | 2026-06-08 05:51:36.918001 |
Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4_activate.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
Published: 2022-12-26T12:28:04.308Z
Updated: 2025-04-11T23:13:55.632Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4165 |
vulnerable | 2026-06-08 05:51:36.917482 |
Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_order POST parameter before concatenating it to an SQL query in order-custom-fields-with-and-without-search.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
Published: 2022-12-26T12:28:01.816Z
Updated: 2025-04-11T23:20:05.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4164 |
vulnerable | 2026-06-08 05:51:36.917057 |
Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_multiple_files_for_post POST parameter before concatenating it to an SQL query in 0_change-gallery.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
Published: 2022-12-26T12:28:09.824Z
Updated: 2025-04-14T13:30:49.898Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4163 |
vulnerable | 2026-06-08 05:51:36.916616 |
Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_deactivate and cg_activate POST parameters before concatenating it to an SQL query in 2_deactivate.php and 4_activate.php, respectively. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
Published: 2022-12-26T12:28:05.085Z
Updated: 2025-04-14T14:19:31.814Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4162 |
vulnerable | 2026-06-08 05:51:36.915865 |
Contest Gallery < 19.1.5 - Author+ SQL Injection
The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_row POST parameter before concatenating it to an SQL query in 3_row-order.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.
Published: 2022-12-26T12:28:10.597Z
Updated: 2025-04-14T13:29:00.898Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4161 |
vulnerable | 2026-06-08 05:51:36.915329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4160 |
vulnerable | 2026-06-08 05:51:36.914768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4159 |
vulnerable | 2026-06-08 05:51:36.914341 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4158 |
vulnerable | 2026-06-08 05:51:36.913746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4157 |
vulnerable | 2026-06-08 05:51:36.913237 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4156 |
vulnerable | 2026-06-08 05:51:36.912532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4155 |
vulnerable | 2026-06-08 05:51:36.912005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4154 |
vulnerable | 2026-06-08 05:51:36.911477 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4153 |
vulnerable | 2026-06-08 05:51:36.911018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4152 |
vulnerable | 2026-06-08 05:51:36.910485 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4151 |
vulnerable | 2026-06-08 05:51:36.909840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4150 |
vulnerable | 2026-06-08 05:51:36.909061 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.