New Simple Gallery
New Simple Gallery has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.
The most common weakness is SQL Injection, behind 1 of the records (100%).
The one issue recorded for New Simple Gallery has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Peter Thaleikis. New Simple Gallery is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.
CVE-2025-58881New Simple Gallery <= 8.0 - Authenticated (Contributor+) SQL Injection
Read the full analysisVulnerability Records
New Simple Gallery
Author
gopiplus
To display images as an automatic slideshow that can also be explicitly played or paused by the user. Check official website for Live demo and Video tutorial http://www.gopiplus.com/work/2010/08/07/new-simple-gallery/ Live Demo Video Tutorial More Info Comments/Suggestion Want to display images as an automatic slideshow that can also be explicitly played or paused by the user? New Simple Gallery rotates and displays an image by fading it into view over, with navigation controls that pop up when the mouse rolls over the Gallery. Show images either as an automatic or manual slideshow. All slide consists of an image that can be hyperlinked. All slide can have a description associated with it. We can use this plug-in in different way. Copy and past the below mentioned code to your desired template location. Use the below code to the page or post. [new-simple-gallery group=”Group2″ width=”500″ height=”300″ pause=”2500″ duration=”500″ cycles=”0″ random=”YES”] Translators English (en_EN) – Gopi Ramasamy Polish (pl_PL) – Abdul Sattar
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C