CVE-2015-2065: Apptha WordPress Video Gallery

High severity, CVSS 7.5. EPSS: 40.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php.

Affected products

• Apptha WordPress Video Gallery: up to and including 2.7

Published 2015-02-24. Last modified 2026-06-17.