Description Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function. Remediation References CVE-2023-34626 Related Vulnerabilities WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Cross-Site Scripting (2.0.1) Apache HTTP Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2005-2970) WordPress Plugin Effectively Add & Customize Free Icons For WordPress Menus-WP Menu Icons Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.8) WordPress 4.8.x Denial of Service Vulnerability (4.8 - 4.8.5) WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Information Disclosure (3.4.7) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-138 CVE-2023-34626