The Video Gallery plugin for WordPress by totalsoft suffers from a time-based SQL Injection vulnerability (CWE-89) in the orderby parameter. This occurs because user-supplied input is not properly escaped or prepared before being included in SQL queries. Authenticated attackers with Administrator privileges can leverage this to append malicious SQL commands to existing queries, enabling unauthorized access to sensitive database information. The CVSS 3.1 score is 7.2, indicating high severity with network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. No patch or remediation details are provided, and the plugin is not a cloud service, so remediation depends on vendor updates or user action.

Successful exploitation allows authenticated administrators to perform SQL Injection attacks via the orderby parameter, potentially leading to unauthorized disclosure, modification, or deletion of sensitive database data. This compromises the confidentiality, integrity, and availability of the affected WordPress site's data. Given the high CVSS score and required privileges, the impact is significant for sites using the vulnerable plugin versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict administrator access to trusted users only and consider disabling or replacing the vulnerable plugin to prevent exploitation. Monitor for vendor updates and apply patches promptly once available.