CVE-2022-0826

CVE-2022-0826: WP Video Gallery <= 1.7.1 - Unauthenticated SQLi

Vendor Unknown

Product WP Video Gallery

Weakness CWE-89 · SQLi

Published May 9, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

Key dates

02Disclosure timeline

May 9, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-0826 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2025-13300 itsourcecode Web-Based Internet Laboratory Management System controller.php sql injection CVE-2025-69338 WordPress Riode Core plugin <= 1.6.26 - SQL Injection vulnerability CVE-2025-5205 1000 Projects Daily College Class Work Report Book dcwr_entry.php sql injection CVE-2025-28898 WordPress WP Multistore Locator plugin <= 2.5.2 - SQL Injection vulnerability CVE-2025-4915 PHPGurukul Auto Taxi Stand Management System auto-taxi-entry-detail.php sql injection