CVE-2015-5599
powerplay gallery project powerplay gallery: no CVSS score yet. EPSS 3.2% chance of exploitation in the next 30 days.
Multiple SQL injection vulnerabilities in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) albumid or (2) name parameter.
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- powerplay_gallery_project:powerplay_gallery
References
- http://packetstormsecurity.com/files/132671/WordPress-WP-PowerPlayGallery-3.3-File-Upload-SQL-Injection.html
- http://seclists.org/fulldisclosure/2015/Jul/64
- http://www.openwall.com/lists/oss-security/2015/07/20/1
- http://www.vapid.dhs.org/advisory.php?v=132
- http://packetstormsecurity.com/files/132671/WordPress-WP-PowerPlayGallery-3.3-File-Upload-SQL-Injection.html