High · 8.5 CVE-2024-35750 EUVD-2024-35508GHSA-7x6v-c89f-g8jf

WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - SQL Injection vulnerability

Published Jun 8, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wpdevart Product: Responsive Image Gallery, Gallery Album

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevart Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.

Affected products

Vendor	Product	Affected	Fixed
wpdevart	Responsive Image Gallery, Gallery Album	≤ 2.0.3	—

References

https://patchstack.com/database/vulnerability/gallery-album/wordpress-gallery-image-and-video-gallery-with-thumbnails-plugin-2-0-3-sql-injection-vulnerability?_s_id=cve vdb-entry