Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-39785 2 Serhii Pasiuk, Wordpress-extensions 2 Gmedia Photo Gallery, Gmedia Photo Gallery 2026-10-13 9.3 Critical
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1.
CVE-2025-63014 2 Serhii Pasiuk, Wordpress 2 Gmedia Photo Gallery, Wordpress 2026-04-23 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through <= 1.25.0.