CVE-2017-14125: SQL Injection
SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an addedittheme task in the wpdevartgallerythemes page to wp-admin/admin.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14125?
CVE-2017-14125 is considered a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2017-14125?
To fix CVE-2017-14125, update the Responsive Image Gallery plugin to version 1.2.1 or later.
Who is affected by CVE-2017-14125?
Users of the Responsive Image Gallery plugin for WordPress versions earlier than 1.2.1 are affected by CVE-2017-14125.
What type of vulnerability is CVE-2017-14125?
CVE-2017-14125 is categorized as an SQL injection vulnerability.
Can CVE-2017-14125 be exploited remotely?
Yes, CVE-2017-14125 can be exploited remotely by attackers targeting the 'id' parameter in the add_edit_theme task.