Vulnerabilities > 10Web > Photo Gallery > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-09-08 CVE-2019-16119 SQL Injection vulnerability in 10Web Photo Gallery
SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album_id parameter.
network
low complexity
10web CWE-89
critical
9.8
2019-07-30 CVE-2019-14313 SQL Injection vulnerability in 10Web Photo Gallery
A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress.
network
low complexity
10web CWE-89
critical
9.8