CVE-2022-36394: Contest-Gallery Contest Gallery

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Authenticated (author+) SQL Injection (SQLi) vulnerability in Contest Gallery plugin <= 17.0.4 at WordPress.

Affected products

• Contest-Gallery Contest Gallery: up to and including 17.0.4

Published 2022-08-23. Last modified 2026-06-17.