Joomla! Gallery WD component version 1.3.6 suffers from a remote SQL injection vulnerability. Continue reading...