Skip to content
OpenAdvisories
High · 7.6 CVE-2026-49771 EUVD-2026-34240GHSA-v23c-9h67-3h55

WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerability

Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Photo Gallery by 10Web allows Blind SQL Injection.

This issue affects Photo Gallery by 10Web: from n/a through 1.8.41.

Affected products

VendorProductAffectedFixed
10Web Photo Gallery by 10Web ≤ 1.8.41 —

References