CVE-2026-39785: WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability

Q: Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or prior privileges. The CVSS vector indicates it is exploitable remotely over the network with low attack complexity and no user interaction.

Q: Which installations are affected?

WordPress sites using Gmedia Photo Gallery version 1.25.1 or earlier are affected according to the available information. The provided data does not identify any configuration prerequisite or mitigation for unpatched sites.

Q: What is the likely security impact?

The vulnerability is rated critical with a CVSS score of 9.3. Its vector indicates high confidentiality impact, no integrity impact, and low availability impact, with scope changed.

Published Oct 6, 2026

Updated

Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.

Affected Software

1 affected component

WordPress Gmedia Photo Gallery<=1.25.1

Event History

Oct 6, 2026

CVE Published

via MITRE·08:34 AM

Data Sourced

via MITRE·08:34 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or prior privileges. The CVSS vector indicates it is exploitable remotely over the network with low attack complexity and no user interaction.

Which installations are affected?

WordPress sites using Gmedia Photo Gallery version 1.25.1 or earlier are affected according to the available information. The provided data does not identify any configuration prerequisite or mitigation for unpatched sites.

What is the likely security impact?

The vulnerability is rated critical with a CVSS score of 9.3. Its vector indicates high confidentiality impact, no integrity impact, and low availability impact, with scope changed.

CVE-2026-39785: WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the likely security impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the likely security impact?