AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-14125

CRITICAL · CVSS 9.8 EPSS 3.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-09-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2017-14125
Severity
CRITICAL
CVSS
9.8
EPSS
3.19%
WordPress

Original NVD Description

SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an add_edit_theme task in the wpdevart_gallery_themes page to wp-admin/admin.php.