Description
Contributor SQL Injection in Gallery <= 4.7.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| bestwebsoft | Gallery | ≤ 4.7.8 | — |
High · 8.5
CVE-2026-57642
EUVD-2026-39757GHSA-pj5w-v4fq-q95p
WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability
Published Jun 26, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack