CVE-2017-12977: 10web Photo Gallery

High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days.

The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwg_edit_tag() in photo-gallery.php and edit_tag() in admin/controllers/BWGControllerTags_bwg.php. It is exploitable by administrators via the tag_id parameter.

Affected products

• 10web Photo Gallery: up to and including 1.3.50

Published 2017-08-21. Last modified 2026-06-17.