First published: Mon Nov 06 2023(Updated: )
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Video Gallery by Total-Soft Video Gallery – Best WordPress YouTube Gallery Plugin allows SQL Injection.This issue affects Video Gallery – Best WordPress YouTube Gallery Plugin: from n/a through 2.1.3.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
Total-soft Video Gallery | <=2.1.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this WordPress plugin vulnerability is CVE-2023-45069.
The severity of CVE-2023-45069 is critical with a score of 9.8.
The vulnerability CVE-2023-45069 allows SQL Injection in Total-Soft Video Gallery WordPress plugin version up to 2.1.4.
To fix the vulnerability CVE-2023-45069 in Total-Soft Video Gallery WordPress plugin, update to version 2.1.5 or later.
More information about the vulnerability CVE-2023-45069 in Total-Soft Video Gallery WordPress plugin can be found at this link: [https://patchstack.com/database/vulnerability/gallery-videos/wordpress-gallery-video-plugin-2-0-2-sql-injection-vulnerability?_s_id=cve]