https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:35:04.694537+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24462 CVE-2021-24462 — Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injections 2026-10-05T22:35:04.709646+00:00

Affected: Ays Pro Photo Gallery by Ays – Responsive Image Gallery

The get_gallery_categories() and get_galleries() functions in the Photo Gallery by Ays – Responsive Image Gallery WordPress plugin before 4.4.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard