Plugin icon

Gmedia Photo Gallery

grand-media

Vulnerabilities:

7

Last Updated:

October 14, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2026-10-13
Title
Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameter
Fixed in
No known fix
CVSS
7.5 (high)
Published
2026-10-05
Title
Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.25.2
CVSS
7.5 (high)
Published
2025-12-31
Title
Gmedia Photo Gallery <= 1.24.1 - Cross-Site Request Forgery
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-06-27
Title
Gmedia Photo Gallery < 1.24.0 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 1.24.0
CVSS
7.5 (high)
Published
2022-04-25
Title
Gmedia Photo Gallery < 1.20.0 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.20.0
CVSS
3.4 (low)
Published
2020-04-28
Title
Gmedia Photo Gallery < 1.18.5 - Multiple Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.18.5
CVSS
5.5 (medium)
Published
2014-09-17
Title
Gmedia Gallery 1.2.1 - Shell Upload
Fixed in
Fixed in 1.2.2
CVSS
n/a