WordPress plugin

Image Gallery with Slideshow Plugin security & vulnerabilities

Q: Is any Image Gallery with Slideshow Plugin vulnerability listed in CISA KEV?

No. None of the known Image Gallery with Slideshow Plugin vulnerabilities is currently listed in the CISA KEV catalog.

image-gallery-with-slideshow— active installsLast vulnerability Apr 1, 2017

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

5Known vulnerabilities

Critical4
High0
Medium1
Low0

Vulnerabilities per year

All Image Gallery with Slideshow Plugin vulnerabilities

Image Gallery with Slideshow Plugin vulnerabilities
Severity	Vulnerability	CVE	Published
Critical9.8	SQL Injection via gallery_name ≤1.5.2No patch available	CVE-2017-1002014	Apr 1, 2017
Critical9.8	SQL Injection via gid ≤1.5.2No patch available	CVE-2017-1002012	Apr 1, 2017
Critical9.8	Blind SQL Injection via imgid ≤1.5.2No patch available	CVE-2017-1002013	Apr 1, 2017
Critical9.8	SQL Injection via selectMulGallery ≤1.5.2No patch available	CVE-2017-1002015	Apr 1, 2017

Critical9.8
SQL Injection via gallery_name
≤1.5.2No patch available
CVE-2017-1002014Apr 1, 2017
Critical9.8
SQL Injection via gid
≤1.5.2No patch available
CVE-2017-1002012Apr 1, 2017
Critical9.8
Blind SQL Injection via imgid
≤1.5.2No patch available
CVE-2017-1002013Apr 1, 2017
Critical9.8
SQL Injection via selectMulGallery
≤1.5.2No patch available
CVE-2017-1002015Apr 1, 2017

Image Gallery with Slideshow Plugin: common questions

Does Image Gallery with Slideshow Plugin have known vulnerabilities?

Yes. VulnCrest Radar lists 5 known vulnerabilities in Image Gallery with Slideshow Plugin: 4 critical, 1 medium. At least one is not fixed in the latest version.

How do I check which version of Image Gallery with Slideshow Plugin I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Image Gallery with Slideshow Plugin vulnerability?

CVE-2017-1002014, published Apr 1, 2017: Image Gallery with Slideshow <= 1.5.2 - SQL Injection via gallery_name. Severity: Critical (CVSS 9.8).

Is any Image Gallery with Slideshow Plugin vulnerability listed in CISA KEV?

No. None of the known Image Gallery with Slideshow Plugin vulnerabilities is currently listed in the CISA KEV catalog.