CVE-2024-13906

The Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.7.3 via deserialization of untrusted input in the 'importgalleryfromcsv' function. This makes it possible for...

PT-2025-10047

Name of the Vulnerable Software and Affected Versions The Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress versions up to, and including, 4.7.3 Description The issue allows authenticated attackers with Administrator-level access and above to inject a PHP Object via...