CVE WATCH / VULNERABILITY DETAIL
CVE-2026-96661
HIGHCVSS 7.5NVD feed
Published 14 October 2026 · tracked since 15 October 2026
Description
The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and including, 1.25.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-108291 CRITICAL 9.8
- CVE-2026-106599 HIGH 8.8
- CVE-2026-103905 HIGH 7.5
- CVE-2026-104795 HIGH 8.8
- CVE-2026-86476 HIGH 8.4
- CVE-2026-110284 HIGH 7.5
- CVE-2026-104909 HIGH 8.1
- CVE-2026-100163 HIGH 7.4
- CVE-2026-103366 HIGH 7.5
- CVE-2026-103367 HIGH 8.1