Fullscreen Galleria
Monthly
SQL Injection in the Fullscreen Galleria WordPress plugin (all versions through 1.6.12) allows authenticated attackers holding contributor-level access or higher to append arbitrary SQL subqueries via an unsanitized 'href' attribute in post content, enabling full read-access to the WordPress database. Multiple vulnerable sinks in galleria-fs.php (lines 68, 74, 146, 1074, 1078) were identified and disclosed by Wordfence; upstream fix commits have been published to the WordPress plugin repository. No public exploit code and no CISA KEV listing have been identified at time of analysis, placing this at moderate real-world priority, elevated for sites with open contributor registration.
SQL Injection in the Fullscreen Galleria WordPress plugin (all versions through 1.6.12) allows authenticated attackers holding contributor-level access or higher to append arbitrary SQL subqueries via an unsanitized 'href' attribute in post content, enabling full read-access to the WordPress database. Multiple vulnerable sinks in galleria-fs.php (lines 68, 74, 146, 1074, 1078) were identified and disclosed by Wordfence; upstream fix commits have been published to the WordPress plugin repository. No public exploit code and no CISA KEV listing have been identified at time of analysis, placing this at moderate real-world priority, elevated for sites with open contributor registration.