CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects WordPress. It may be remotely exploitable. It involves a SQL injection risk.
CVE
CVE-2017-14125
Severity
CRITICAL
CVSS
9.8
EPSS
3.19%
WordPress
Original NVD Description
SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an add_edit_theme task in the wpdevart_gallery_themes page to wp-admin/admin.php.
Related CVEs
Other vulnerabilities affecting the same vendor(s)