Slavco Mihajloski

About Slavco Mihajloski

Passionate about web technologies with security, privacy and performance on mind. Proud father and husband, who always finds some time to read good writing. Follow him on Twitter @mslavco

February 27, 2017Slavco Mihajloski

SQL Injection Vulnerability in NextGEN Gallery for WordPress

As part of a vulnerability research project for our Sucuri Firewall (WAF), we have been auditing multiple open source projects looking for security issues. While working on the WordPress plugin NextGEN Gallery, we discovered a severe SQL Injection vulnerability. This vulnerability allows an unauthenticated user…