PT-2023-10169 · WordPress · Portfolio Gallery Plugin

Published 2023-05-28 · Updated 2024-05-17 · CVE-2014-125101

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Portfolio Gallery Plugin versions up to 1.1.8

Description A critical vulnerability has been found in the Portfolio Gallery Plugin on WordPress, affecting an unknown part. The manipulation leads to sql injection and can be initiated remotely.

Recommendations For Portfolio Gallery Plugin versions up to 1.1.8, upgrade to version 1.1.9 to address this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-125101

Affected Products

Portfolio Gallery Plugin

References · 8

• https://github.com/wp-plugins/portfolio-gallery/commit/58ed88243e17df766036f4857041edaf358076d3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-125101 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-125101 · Note
• https://vuldb.com/?id.230085 · Note
• https://t.me/cibsecurity/64748 · Telegram Post
• https://t.me/cvenotify/51305 · Telegram Post
• https://t.me/cvenotify/63040 · Telegram Post
• https://vuldb.com/?ctiid.230085 · Note