High · 8.8 CVE-2025-49897 EUVD-2025-25028GHSA-r728-99hv-pfh5

WordPress Vertical scroll slideshow gallery v2 plugin <= 9.1 - SQL Injection vulnerability

Published Aug 15, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Gopiplus Product: Vertical scroll slideshow gallery v2

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection. This issue affects Vertical scroll slideshow gallery v2: from n/a through 9.1.

Affected products

Vendor	Product	Affected	Fixed
gopiplus	Vertical scroll slideshow gallery v2	≤ 9.1	—

References

https://patchstack.com/database/wordpress/plugin/vertical-scroll-slideshow-gallery-v2/vulnerability/wordpress-vertical-scroll-slideshow-gallery-v2-plugin-9-1-sql-injection-vulnerability?_s_id=cve vdb-entry