Advisories · Technology
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress.
Every CVE that names Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys
- Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress
- SQL injection
- CVSS 7.2 High
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injection
- Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress
- Insecure deserialization