Description
Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wasiliy Strecker | Contest Gallery | ≤ 28.1.6 | — |
Critical · 9.3
CVE-2026-40771
EUVD-2026-36980GHSA-w97c-mw8g-gjf8
WordPress Contest Gallery plugin <= 28.1.6 - SQL Injection vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack