CVE-2026-2497

Name of the Vulnerable Software and Affected Versions Gallery by BestWebSoft versions prior to 4.8.0

Description An SQL Injection issue exists where authenticated attackers with Editor-level access and above can extract sensitive information from the database. The gllr save postdata() function stores unsanitized array keys from $ POST directly into post meta, which are subsequently used in SQL queries without prepared statements. This occurs via the gallery order {post id} parameter array keys due to insufficient escaping of user-supplied parameters and a lack of sufficient preparation of the SQL query.

Recommendations Update to a version newer than 4.7.9.