High severity8.2NVD Advisory· Published Jun 9, 2026· Updated Jun 9, 2026

CVE-2017-20249

Description

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Attackers can send GET requests with crafted SQL payloads in the albid parameter to extract sensitive database information including user credentials and authentication hashes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Apptha Slider Galleryinferred2 versions
=1.0+ 1 more
- (no CPE)range: =1.0
- (no CPE)range: = 1.0
Package: https://wordpress.org/plugins/apptha-slider-gallery
Apptha/Slider Galleryllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

www.apptha.comnvd
www.exploit-db.com/exploits/41567nvd
www.vulncheck.com/advisories/wordpress-plugin-apptha-slider-gallery-sql-injectionnvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000