CVE-2026-96661Published
Gmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameter
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-96661 · Microsoft / collected KEV context
cve-program · CVE-2026-96661
- https://www.wordfence.com/threat-intel/vulnerabilities/id/0592050d-4e72-4b40-a88b-b92e53c49e9e?source=cve
- https://plugins.trac.wordpress.org/browser/grand-media/tags/1.25.1/inc/db.connect.php#L1682
- https://plugins.trac.wordpress.org/browser/grand-media/tags/1.25.1/inc/db.connect.php#L2206
- https://plugins.trac.wordpress.org/browser/grand-media/tags/1.25.1/app/access.php#L131
- https://plugins.trac.wordpress.org/browser/grand-media/tags/1.25.1/app/access.php#L36
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.