PT-2024-16462 · WordPress · Contest Gallery

Khayal Farzaliyev + 1 · Published 2024-11-05 · Updated 2026-04-08 · CVE-2024-10687

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Contest-Gallery plugin for WordPress versions prior to 24.0.1 Contest-Gallery plugin for WordPress version 24.0.1 is not affected according to some sources, but others indicate versions up to and including 24.0.3 are vulnerable. Therefore, considering all information, the most accurate representation is: Contest-Gallery plugin for WordPress versions up to and including 24.0.3

Description The Contest-Gallery plugin for WordPress is susceptible to time-based SQL Injection due to insufficient escaping on the user-supplied collectedIds parameter and lack of sufficient preparation on the existing SQL query. This allows unauthenticated attackers to append additional SQL queries into already existing queries, potentially extracting sensitive information from the database. Exploitation could lead to unauthorized data access.

Recommendations Update to the latest version of the Contest-Gallery plugin for WordPress immediately to secure your site. As a temporary workaround, consider restricting access to the plugin or disabling the collectedIds parameter until a patch is applied, but the most effective solution is updating to a version beyond 24.0.3.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-10687

Affected Products

Contest Gallery

References · 14

• https://osv.dev/vulnerability/CVE-2024-10687 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-10687 · Security Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3175299%40contest-gallery%2Ftags%2F24.0.3&new=3180268%40contest-gallery%2Ftags%2F24.0.4 · Patch
• https://t.me/latest_high_impact_cve/1456 · Telegram Post
• https://twitter.com/transilienceai/status/1855297961988936181 · Twitter Post
• https://twitter.com/transilienceai/status/1855297979583991961 · Twitter Post
• https://plugins.trac.wordpress.org/browser/contest-gallery/tags/24.0.1/v10/v10-frontend/ecommerce/ecommerce-get-raw-data-from-galleries.php#L61 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/fd3b4c44-d47a-45de-bcb2-0820e475b331?source=cve · Note
• https://twitter.com/CVEnew/status/1853736855029637346 · Twitter Post
• https://twitter.com/0dayPublishing/status/2041948472962596942 · Twitter Post
• https://twitter.com/transilienceai/status/1855297987360260144 · Twitter Post
• https://twitter.com/transilienceai/status/1855297968615887211 · Twitter Post
• https://twitter.com/transilienceai/status/1855297954082664858 · Twitter Post
• https://t.me/cvedetector/9856 · Telegram Post