Description
Unauthenticated SQL Injection in InPost Gallery <= 2.1.4.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| RealMag777 | InPost Gallery | ≤ 2.1.4.6 | — |
Critical · 9.3
CVE-2026-39574
EUVD-2026-37046GHSA-6h64-2vq4-m659
WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability
Published Jun 16, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack