Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-39785 EUVD-2026-93031GHSA-2r8p-hw5f-xgff

WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability

Published Oct 6, 2026 · Updated Oct 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1.

Affected products

VendorProductAffectedFixed
Serhii Pasyuk Gmedia Photo Gallery ≤ 1.25.1 —

References