title: WordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tips and Tricks HQ, Peter Petreski Simple Photo Gallery simple-photo-gallery allows SQL Injection.This issue affects Simple Photo Gallery: from n/a through v1.8.1.
problem types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: simple-photo-gallery
product: Simple Photo Gallery
vendor: Tips and Tricks HQ, Peter Petreski
versions:
lessThanOrEqual: v1.8.1, status: affected, version: n/a, versionType: custom
}