CVE-2026-102377

A PHP Object Injection vulnerability exists in Photo Gallery by 10Web versions up to 1.8.46, allowing attackers to exploit the application by injecting malicious objects, potentially leading to remote code execution. This high-severity flaw poses significant risks to any installations of the affected software, particularly for those handling sensitive data or user-generated content. Organizations using this plugin should prioritize immediate updates to mitigate potential exploitation.