CVE-2013-3478: Apptha Video Gallery Plugin

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php.

Affected products

• Apptha Video Gallery Plugin: version 1.6 only; version 2.0 only

Published 2014-03-05. Last modified 2026-06-16.