CVE-2026-39785

Serhii Pasyuk Gmedia Photo Gallery

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

9.3 Critical · CVSS 3.1, patchstack.com

Description

Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.

References

patchstack.com/database/wordpress/plugin/grand-media/vulnerability/wordpress-gmedia-photo-gallery-plugin-1-25-1-sql-injection-vulnerability?_s_id=cve