zm-gallery vulnerabilities and fixes

Recent CVEs affecting zm-gallery, with upgrade or downgrade steps. 1 tracked.

Also searched as: zm gallery.

zm-gallery has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-09-13. Highest priority: CVE-2016-10940 (score 53/100).

• CVE-2016-10940 HIGH 7.2 DOWNGRADE The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.

FAQ

How do I fix zm-gallery vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is zm-gallery being exploited right now?

None of the tracked zm-gallery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which zm-gallery CVE should I patch first?

CVE-2016-10940 currently ranks highest (53/100): The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter..

← Back to latest CVEs