Skip to content

Vendor

apptha vulnerabilities

8 published CVES affecting apptha, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
8
Critical
0
High
7
Medium
0
Low
1
Unscored
0
CISA KEV
0
Atom feed of apptha alerts

Products

Latest apptha CVEs

Newest publication first

  1. CVE-2017-20250 WordPress Plugin Mac Photo Gallery 3.0 Arbitrary File Download

    Published
    HighCVSS 8.7 EPSS 0.64%

    Mac Photo Gallery 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the albid parameter. Attackers can send requests to macdownload.php with directory traversal sequences to access sensitive files like wp...

  2. CVE-2017-20249 WordPress Plugin Apptha Slider Gallery 1.0 SQL Injection

    Published
    HighCVSS 8.8 EPSS 0.30%

    Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Attackers can send GET requests with crafted SQL payloads in the albid parameter to ex...

  4. CVE-2017-20247 WordPress Plugin PICA Photo Gallery 1.0 SQL Injection

    Published
    HighCVSS 8.8 EPSS 0.26%

    WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid parameter. Attackers can send GET requests with crafted SQL payloads in the aid param...

  5. CVE-2015-2065 Wordpress Video Gallery <= 2.7 - SQL Injection

    Published
    HighCVSS 7.5 EPSS 40.1% Public exploit

    SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php.

  6. CVE-2014-9097 WORDPRESS VIDEO GALLERY < 2.6 - SQL Injection

    Published
    HighCVSS 7.5 EPSS 5.0% Public exploit

    Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow (1) remote attackers to execute arbitrary SQL commands via the vid parameter in a myextract action to wp-...

  7. CVE-2014-9098 WORDPRESS VIDEO GALLERY <= 2.5 - Cross-Site Scripting

    Published
    LowCVSS 3.5 EPSS 2.9% Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.