Unrated severityNVD Advisory· Published Aug 12, 2014· Updated Jun 17, 2026

CVE-2014-5201

Description

SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a go_view_object action to wp-admin/admin-ajax.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gallery Objects Project/Gallery Objects
cpe:2.3:a:gallery_objects_project:gallery_objects:0.4:-:-:*:-:wordpress:*:*
WordPress/Gallery Objectsllm-create
Range: = 0.4

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/127533/WordPress-Gallery-Objects-0.4-SQL-Injection.htmlnvdExploit
www.homelab.it/index.php/2014/07/18/wordpress-gallery-objects-0-4-sql-injection/nvdExploit
www.securityfocus.com/bid/68791nvdExploit

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000