Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-15	CVE-2018-18018	SQL Injection vulnerability in Tribulant Slideshow Gallery 1.6.8 SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter. network low complexity tribulant CWE-89 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.