https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:08:00.501381+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-4151 CVE-2022-4151 — Contest Gallery < 19.1.5 - Admin+ SQL Injection 2026-10-04T23:08:00.520670+00:00

Affected: Unknown Contest Gallery, Unknown Contest Gallery Pro

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the option_id GET parameter before concatenating it to an SQL query in export-images-data.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.