Search vulnerabilities

Results 2

Export CSV
CVE-2026-39785

WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed
CVE-2025-63014

WordPress Gmedia Photo Gallery plugin <= 1.25.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through <= 1.25.0.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed