漏洞描述
The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statement via the bwg_frontend_data AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL injection
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wpscan.comhttps://wpscan.com/vulnerability/0b4d870f-eab8-4544-91f8-9c5f0538709c↗wordpress.orghttps://wordpress.org/plugins/photo-gallery/advanced/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2022-0169↗plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/changeset/2672822/photo-gallery#file9↗