Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Serhii Pasyuk Clear all filters
TI-2026-67979 CVE-2026-39785 · GHSA-2r8p-hw5f-xgff

SQL injection in Gmedia Photo Gallery WordPress plugin

Priority MEDIUM 45

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: fro…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00229 Published 2026-10-06 No fix listed CWE-89
TI-2025-33224 CVE-2025-53257 · GHSA-wwcf-g45v-mxvf

WordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows PHP Local File Inclusion.This issue affects G…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00733 Published 2025-06-27 No fix listed CWE-98