Description Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function. Remediation References CVE-2023-34626 Related Vulnerabilities WordPress Plugin Landing Page Builder-Lead Page-Optin Page-Squeeze Page-WordPress Landing Pages Unspecified Vulnerability (1.4.1) Oracle JRE CVE-2013-0445 Vulnerability (CVE-2013-0445) WordPress Plugin Super CAPTCHA 'admin.php' SQL Injection (2.2.4) WordPress Plugin Tablesome-Responsive Table, Woocommerce Automation, Email Log, Form Automation-Contact Form 7, Elementor, WPForms, Forminator Cross-Site Request Forgery (1.0.25) IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2947) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-138 CVE-2023-34626