The WP Easy Gallery – WordPress Gallery Plugin contains a time-based SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. Specifically, the 'key' parameter is not properly escaped or prepared in SQL queries, allowing authenticated attackers with Contributor or higher privileges to append malicious SQL code. This vulnerability affects all plugin versions up to and including 4.8.5. The CVSS 3.1 score is 8.8, reflecting high impact on confidentiality, integrity, and availability with network attack vector and low attack complexity.

Exploitation of this vulnerability allows attackers to perform time-based SQL Injection attacks, potentially extracting sensitive information from the database. The impact includes full compromise of data confidentiality, integrity, and availability. Because the attacker needs only Contributor-level access, the threat surface includes a broad set of authenticated users, increasing risk within affected environments.

Patch status is not yet confirmed — no official fix or patch links are currently available. Users should monitor the vendor's advisory for updates and apply any official patches once released. Until a patch is available, restrict Contributor-level access to trusted users only and consider disabling or removing the WP Easy Gallery plugin if possible to mitigate risk.