Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress 4.7.3

  • Severity: high-risk
  • Status: Fixed
  • Publication: March 6, 2025

The Gallery by BestWebSoft is a plugin for WordPress that helps you create customizable image and photo galleries. Unfortunately, this plugin is vulnerable to a type of hacking called PHP Object Injection. This means that if someone gains access to the plugin, they could potentially inject their own code and take control of your website. However, this vulnerability only affects versions up to 4.7.3 and requires the hacker to have Administrator-level access. If you have other plugins or themes installed that also have this vulnerability, it could make the situation worse.

Detected in:

Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress fixed vulnerable versions: >= * <= 4.7.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.