Security WordPress Photo Gallery 1.2.8 SQL Injection January 29, 2015 007admin WordPress Photo Gallery plugin version 1.2.8 suffers from a remote SQL injection vulnerability.