Bestwebsoft Gallery By Bestwebsoft – Customizable Image And Photo Galleries For WordPress
2 CVEs affecting Bestwebsoft Gallery By Bestwebsoft – Customizable Image And Photo Galleries For WordPress. Latest disclosed: 2026-08-16. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-2497 | High | 7.2 | 2026-08-16 | The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parameter array keys in all versions up to, a… |
CVE-2024-13906 | High | 7.2 | 2025-03-07 | The Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up… |