Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Huge-IT gallery-images plugin can execute unauthorized database commands

CVE-2016-11018 · published 6 years ago
Summary

The WordPress gallery plugin Huge-IT image_gallery (versions before 1.9.0) trusts the Client-Ip and X-Forwarded-For request headers. An attacker can send specially crafted values in those headers to run unwanted database commands, potentially exposing or altering site data. Update the plugin to version 1.9.0 or later, or replace it with a secure alternative, and monitor for unusual database activity.

What to do
  • Update huge-it image_gallery to version 1.9.0 or later.
Affected software
VendorProductAffected versions
huge-it image_gallery < 1.9.0
cpe:2.3:a:huge-it:image_gallery:*:*:*:*:*:wordpress:*:*
Original advisory text
An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is g...
An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is huge_it_image_gallery_ajax_callback().
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published21 Jan 2020
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2016-11018 · NVD
Track software like this
Free during beta