EIP-2026-113815

This advisory details a SQL injection vulnerability in the WordPress Huge-IT Video Gallery plugin (version 2.0.4 and below). The vulnerability arises from improper sanitization of the `$_POST['cat_search']` parameter, allowing attackers to inject malicious SQL queries.