Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:28:51 +0000 EUVD-2026-228875 https://cve.radiocsirt.org/vuln/euvd-2026-228875 EUVD-2026-228875 https://cve.radiocsirt.org/vuln/euvd-2026-228875 fkie_cve-2022-4155 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4155 <p>The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the wp_user_id GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site&#39;s database.</p> <p>The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the wp_user_id GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site&#39;s database.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4155 GHSA-43qm-4w5w-7m4c https://cve.radiocsirt.org/vuln/ghsa-43qm-4w5w-7m4c <p>The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the wp_user_id GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site&#39;s database.</p> <p>The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the wp_user_id GET parameter before concatenating it to an SQL query in management-show-user.php. This may allow malicious users with administrator privileges (i.e. on multisite WordPress configurations) to leak sensitive information from the site&#39;s database.</p> https://cve.radiocsirt.org/vuln/ghsa-43qm-4w5w-7m4c gsd-2022-4155 https://cve.radiocsirt.org/vuln/gsd-2022-4155 gsd-2022-4155 https://cve.radiocsirt.org/vuln/gsd-2022-4155