Skip to main content
ExploitPublished

https://wordpress.org/plugins/contest-gallery · WordPress Contest Gallery 28.1.4 · Unauthenticated Blind SQL Injection

Affects https://wordpress.org/plugins/contest-gallerySource Exploit-DB RSS Feed

0
Severity
Critical

Rated by Threat Radar

Data as of 30 Aug 2026, 16:57 UTC

What to do

Affected software

ProductAffectedFixed in
https://contest-gallery.com https://wordpress.org/plugins/contest-galleryAffected
  • <=28.1.4
  • <= 28.1.4
Fixed in–

AI-suggested

Until an official fix is available, consider disabling or removing the affected plugin version to prevent exploitation. Monitor official sources for updates.

Description

WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection

Indicators of compromise

Exploit source code

Exploit code for WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection2,002 characters
# Exploit Title: WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection
# Google Dork:  N/A
# Date: 2026-06-02
# Exploit Author: cardosource
# Vendor Homepage: https://contest-gallery.com/
# Software Link: https://wordpress.org/plugins/contest-gallery/
# Version: <= 28.1.4
# Tested on: Docker - PHP 8.2/Apache + MariaDB (WordPress Environment)
# CVE: 2026-3180


"""
Description

A Blind SQL Injection vulnerability exists in Contest Gallery versions 28.1.4 and earlier. The issue is…

References

Community reviews

Loading reviews…