Authentication Bypass Vulnerability in WP Easy Gallery

CVE-2024-9018

Summary

The WP Easy Gallery Plugin for WordPress is prone to a time-based SQL Injection vulnerability triggered by the ‘key’ parameter. This issue, present in all versions up to and including 4.8.5, arises from inadequate escaping of user-supplied data and insufficient preparation of SQL statements. As a result, authenticated users with Contributor-level access or higher can manipulate existing SQL queries, potentially allowing attackers to extract sensitive information from the database, posing a serious risk to the integrity and confidentiality of stored data.

References