Approved changes feed: RSS · Atom

cpe:2.3:a:huge-it:image_gallery:1.0.1:*:*:*:*:wordpress:*:*

part: a version: 1.0.1 update: *

VendorHuge It (1272668a-91c6-53cb-865a-d978ff1533dc)
ProductImage Gallery (ab476c66-40ef-5633-a937-c80fe5fba0c8)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/gallery-images purl2cpe 2026-06-01 10:12:37.716970

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-7153 vulnerable 2026-06-08 05:05:58.770385 Details available
SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php.
Published: 2014-09-22T14:00:00.000Z
Updated: 2024-09-17T01:50:48.478Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.