Description The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection. References https://wordpress.org/plugins/gallery-photo-gallery/#developers