SQL Injection Vulnerability in Photo Gallery Plugin for WordPress

CVE-2026-76006

What is CVE-2026-76006?

The Photo Gallery by Ays plugin for WordPress is susceptible to SQL Injection due to improper parameter handling through the 's' parameter. This vulnerability affects all versions up to and including 6.8.2. Authenticated users with administrator-level access can exploit this weakness to inject malicious SQL queries into the existing database queries. The exploitation occurs via two key execution paths — leveraging $wpdb->get_var() in record_count() and $wpdb->get_results() in the prepare_items()/get_image_categories() methods. These paths allow attackers to extract sensitive information using both blind and UNION-based SQL exfiltration techniques.

References