https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:59:22.896269+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24915 CVE-2021-24915 — Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure 2026-10-06T20:59:22.898257+00:00

Affected: Unknown Contest Gallery – Photo Contest Plugin for WordPress

The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the list of all users registered on the blog, including their username and email address