Approved changes feed: RSS · Atom

cpe:2.3:a:serhii_pasyuk:gmedia_photo_gallery:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSerhii Pasyuk (75f85425-a397-5ea1-8627-39073b9bdcee)
ProductGmedia Photo Gallery (f42dbc83-83dd-5c3b-9b0d-d7544edfdf4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-39785 vulnerable 2026-11-03 10:15:55.228274 WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1.
Published: 2026-10-06T08:34:41.464Z
Updated: 2026-10-13T16:31:43.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63014 vulnerable 2026-06-08 07:39:17.165455 WordPress Gmedia Photo Gallery plugin <= 1.25.0 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Cross Site Request Forgery.This issue affects Gmedia Photo Gallery: from n/a through <= 1.25.0.
Published: 2025-12-31T15:52:00.938Z
Updated: 2026-04-28T16:14:08.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53257 vulnerable 2026-06-08 07:31:14.321670 WordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows PHP Local File Inclusion.This issue affects Gmedia Photo Gallery: from n/a through <= 1.23.0.
Published: 2025-06-27T13:21:05.659Z
Updated: 2026-04-28T16:13:22.178Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.