Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:58:40 +0000 CVE-2021-24915 — Contest Gallery < 13.1.0.6 - Missing Access Controls to Unauthenticated SQL injection / Email Address Disclosure https://cve.radiocsirt.org/vuln/cve-2021-24915 <p><strong>Affected:</strong> Unknown Contest Gallery – Photo Contest Plugin for WordPress</p> <p>The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the list of all users registered on the blog, including their username and email address</p> <p><strong>Affected:</strong> Unknown Contest Gallery – Photo Contest Plugin for WordPress</p> <p>The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the list of all users registered on the blog, including their username and email address</p> https://cve.radiocsirt.org/vuln/cve-2021-24915