WordSec
WordSec

Contest Gallery Pro

Explore Contest Gallery Pro vulnerabilities across all versions. Currently tracking 18 known vulnerabilities, including severity, impact, and patch status.

01234567891029.11.2022Today29.11.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_activate and cg_deactivate CVSS 7.5 · 29.11.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id CVSS 7.5 · 29.11.202205.12.20228.1Contest Gallery <= 19.1.5 - Unauthenticated SQL Injection via user_id CVSS 8.1 · 05.12.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via addCountS CVSS 7.5 · 05.12.20228.8Contest Gallery (Pro) <= 19.1.5 - SQL Injection via option_id CVSS 8.8 · 05.12.20227.5Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via upload[] CVSS 7.5 · 05.12.20227.5Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via cg_id CVSS 7.5 · 05.12.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_row CVSS 7.5 · 05.12.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_order CVSS 7.5 · 05.12.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id GET CVSS 7.5 · 05.12.20226.6Contest Gallery Pro <= 19.1.4.1 - Authenticated (Administrator+) SQL Injection via wp_user_id CVSS 6.6 · 05.12.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_start CVSS 7.5 · 05.12.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_copy_id CVSS 7.5 · 05.12.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_multiple_files_for_post CVSS 7.5 · 05.12.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via wp_user_id CVSS 7.5 · 05.12.20227.5Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_option_id CVSS 7.5 · 05.12.20228.1Contest Gallery <= 19.1.4.1 - Unauthenticated SQL Injection via cg_Fields CVSS 8.1 · 05.12.202217.05.20269.8Contest Gallery Pro <= 29.0.1 - Unauthenticated Privilege Escalation CVSS 9.8 · 17.05.2026

Strategic Overview

Avg CVSSHigh
7.7/ 10
Patch Coverage100%
Open

0

Fixed

18

Get automatic notifications for all Contest Gallery Pro vulnerabilities before they are exploited.

Vulnerability Records

18 records
2026-05-17 00:00
Contest Gallery Pro <= 29.0.1 - Unauthenticated Privilege Escalation
Contest Gallery Pro
<= 29.0.1
CVE-2026-42680
9.8
Critical
darooYes
2022-12-05 00:00
Contest Gallery <= 19.1.5 - Unauthenticated SQL Injection via user_id
Contest Gallery Pro
<= 19.1.5
CVE-2022-4156
8.1
High
Kunal SharmaYes
2022-12-05 00:00
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via addCountS
Contest Gallery Pro
<= 19.1.4.1
CVE-2022-4166
7.5
High
Kunal SharmaYes
2022-12-05 00:00
Contest Gallery (Pro) <= 19.1.5 - SQL Injection via option_id
Contest Gallery Pro
<= 19.1.5
CVE-2022-4150
8.8
High
Kunal SharmaYes
2022-12-05 00:00
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via upload[]
Contest Gallery Pro
<= 19.1.5
CVE-2022-4153
7.5
High
Kunal SharmaYes
2022-12-05 00:00
Contest Gallery <= 19.1.5 - Authenticated (Author+) SQL Injection via cg_id
Contest Gallery Pro
<= 19.1.5
CVE-2022-4159
7.5
High
Kunal SharmaYes
2022-12-05 00:00
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_row
Contest Gallery Pro
<= 19.1.4.1
CVE-2022-4162
7.5
High
Kunal SharmaYes
2022-12-05 00:00
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via cg_order
Contest Gallery Pro
<= 19.1.4.1
CVE-2022-4165
7.5
High
Kunal SharmaYes
2022-12-05 00:00
Contest Gallery <= 19.1.4.1 - Authenticated (Author+) SQL Injection via option_id GET
Contest Gallery Pro
<= 19.1.4.1
CVE-2022-4152
7.5
High
Kunal SharmaYes
2022-12-05 00:00
Contest Gallery Pro <= 19.1.4.1 - Authenticated (Administrator+) SQL Injection via wp_user_id
Contest Gallery Pro
<= 19.1.4.1
CVE-2022-4154
6.6
Medium
Kunal SharmaYes
Showing 1–10 of 18 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C