Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress vulnerabilities

2 known vulnerabilities in Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress from BestWebSoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Gallery by BestWebSoft – Customizable Image…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-2497Aug 16, 2026BestWebSoft

  The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parameter array keys in all versions up to, and including, 4.7.9. This is due to insufficient escaping on the user supplied parameter and lack of

• 7.2 High severity

  Gallery by BestWebSoft – Customizable Image…: Deserialization of Untrusted Data

  CVE-2024-13906Mar 7, 2025BestWebSoft

  The Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.7.3 via deserialization of untrusted input in the 'import_gallery_from_csv' fun