pasyuk CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH pasyuk CVE published 2026-10-14

CVE-2026-96661

The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and including, 1.25.1. This vulnerability allows unauthenticated attackers to append additional SQL queries into existing queries, potentially leading to sensitive information extraction from the database. The unauthenticated mobile app endpoint dispatches the libra [truncated]