CVE-2016-10921: Ays-Pro Photo Gallery

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection.

Affected products

• Ays-Pro Photo Gallery: before 1.0.1 (fixed in 1.0.1)

Published 2019-08-22. Last modified 2026-06-17.