OrdaSoft Joomla Gallery free extension for Joomla — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in OrdaSoft Joomla Gallery free extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

Vendor: OrdaSoft.com

CVE ID	Title	CVSS	Severity	Published
CVE-2026-88857	Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 CWE-434	9.4	Critical	2026-09-20
CVE-2026-88854	Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 CWE-89	9.3	Critical	2026-09-20
CVE-2026-88855	Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 CWE-89	8.6	High	2026-09-20
CVE-2026-88856	Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 CWE-94	9.4	Critical	2026-09-20

All 4 known CVE vulnerabilities affecting OrdaSoft Joomla Gallery free extension for Joomla with full Chinese analysis, references, and POCs where available.