Skip to content
OpenAdvisories
High · 8.5 CVE-2025-49049 EUVD-2026-4097GHSA-jwhf-c56x-93c8

WordPress DZS Video Gallery plugin <= 12.39 - SQL Injection vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ZoomIt DZS Video Gallery dzs-videogallery allows SQL Injection.This issue affects DZS Video Gallery: from n/a through <= 12.39.

Affected products

VendorProductAffectedFixed
ZoomIt DZS Video Gallery ≤ 12.39 —

References