{"id":"CVE-2025-32121","aliases":["EUVD-2025-9887","GHSA-5v3v-4xvw-m8wx"],"status":"published","title":"WordPress Video \u0026 Photo Gallery for Ultimate Member plugin \u003c= 1.1.3 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SuitePlugins Video \u0026 Photo Gallery for Ultimate Member gallery-for-ultimate-member allows SQL Injection.This issue affects Video \u0026 Photo Gallery for Ultimate Member: from n/a through \u003c= 1.1.3.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00593,"percentile":0.48685,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2025-04-04T15:58:22Z","modified":"2026-06-17T09:11:28Z","products":[{"vendor":"suiteplugins","product":"video \u0026 photo gallery for ultimate member"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/gallery-for-ultimate-member/vulnerability/wordpress-video-photo-gallery-for-ultimate-member-plugin-1-1-3-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32121"},{"url":"https://patchstack.com/database/wordpress/plugin/gallery-for-ultimate-member/vulnerability/wordpress-video-photo-gallery-for-ultimate-member-plugin-1-1-3-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-5v3v-4xvw-m8wx"}],"sources":{"cve":[{"id":"CVE-2025-32121","title":"WordPress Video \u0026 Photo Gallery for Ultimate Member plugin \u003c= 1.1.3 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SuitePlugins Video \u0026 Photo Gallery for Ultimate Member gallery-for-ultimate-member allows SQL Injection.This issue affects Video \u0026 Photo Gallery for Ultimate Member: from n/a through \u003c= 1.1.3.","status":"published","published":"2025-04-04T15:58:22.311Z","modified":"2026-04-28T16:12:16.7Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:46.42892Z"}],"euvd":[{"id":"EUVD-2025-9887","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SuitePlugins Video \u0026 Photo Gallery for Ultimate Member gallery-for-ultimate-member allows SQL Injection.This issue affects Video \u0026 Photo Gallery for Ultimate Member: from n/a through \u003c= 1.1.3.","status":"published","published":"2025-04-04T15:58:22Z","modified":"2026-04-28T16:12:16Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:05:45.594696Z"}],"ghsa":[{"id":"GHSA-5v3v-4xvw-m8wx","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SuitePlugins Video \u0026 Photo Gallery for Ultimate Member allows SQL Injection. This issue affects Video \u0026 Photo Gallery for Ultimate Member: from n/a through 1.1.3.","status":"published","published":"2025-04-04T18:30:56Z","modified":"2025-04-04T18:30:57Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:00:48.250813Z"}],"nvd":[{"id":"CVE-2025-32121","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SuitePlugins Video \u0026 Photo Gallery for Ultimate Member gallery-for-ultimate-member allows SQL Injection.This issue affects Video \u0026 Photo Gallery for Ultimate Member: from n/a through \u003c= 1.1.3.","status":"published","published":"2025-04-04T16:15:19.71Z","modified":"2026-06-17T09:11:28.43Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:10:58.094557Z"}]}}