plugin

Photoracer Vulnerabilities

1 known security issue reported for the Photoracer WordPress plugin. Most recent disclosed Jun 15, 2009.

1 critical

Running Photoracer on your site? Check whether your installed version is affected.

Photoracer Plugin <= 1.0 - SQL Injection

critical

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS:: 9.8
Affected:: up to 1.0
Fix:: No patched version reported
Disclosed:: Jun 15, 2009

CVE-2009-2122 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database