CVE-2017-20247Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid parameter. Attackers can send GET requests with crafted SQL payloads in the aid parameter to extract sensitive database information including user credentials and table contents.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-06-09); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2017-20247

Classification over time

Date	Total	Labels

2026-06-09	1	Disclosure1
2026-07-26	1	Patch1

Full discourse2 posts

DFIR Lab@DFIR_Lab90d
Patch
🚨 HIGH severity CVE-2017-20247 (CVSS 8.2): WordPress PICA Photo Gallery 1.0 vulnerable to unauthenticated SQL injection via aid parameter. Attackers can extract DB credentials remotely. Uninstall/replace immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/S8wwMsZkVv
Post summary
The tweet announces a high‑severity SQL injection flaw in WordPress PICA Photo Gallery, provides technical details, and urges users to uninstall or replace the plugin immediately.
0001034
96 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2017-20247 WordPress Plugin PICA Photo Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting ma… https://www.cve.org/CVERecord?id=CVE-2017-20247
Post summary
CVE-2017-20247 is an unauthenticated SQL injection in PICA Photo Gallery 1.0 that permits arbitrary SQL queries; the text provides technical details but no PoC, exploit, patch, or active exploitation information.
0000083
57.6K followersView on X

Explore more

Back to dashboard