NG
Product
NextGEN Gallery
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 9Medium 14Low 1
Watch
Add NextGEN Gallery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-3684 | 9.8 | Feb 11 | NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload Affected: before 1.9.13 |
| CVE-2019-14314 | 9.8 | Aug 27 | A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress Affected: before 3.2.10 |
| CVE-2016-10889 | 9.8 | Aug 14 | The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name Affected: before 2.1.57 |
| CVE-2023-48328 | 8.8 | Nov 30 | WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF) Affected: before 3.39 |
| CVE-2015-1784 | 8.8 | Jul 7 | In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application Affected: before 2.0.77.3 |
| CVE-2020-35942 | 8.8 | Feb 9 | A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusion via settings modification, leading… Affected: before 3.5.0 |
| CVE-2015-9228 | 8.8 | Sep 12 | In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from… Affected: 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4; 1.5.5; +34 more |
| CVE-2023-3154 | 7.5 | Oct 16 | NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization Affected: before 3.39 |
| CVE-2013-0291 | 7.5 | Jan 30 | NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability Affected: 1.9.10; 1.9.11 |
| CVE-2016-6565 | 7.5 | Jul 13 | The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an… Affected: before 2.1.57 |
| CVE-2018-7586 | 7.5 | Mar 1 | In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured Affected: through 2.2.46 |
| CVE-2023-3155 | 7.2 | Oct 16 | NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete Affected: before 3.39 |
| CVE-2015-1785 | 6.5 | Jul 7 | In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application Affected: before 2.0.77.3 |
| CVE-2020-35943 | 6.5 | Feb 9 | A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload Affected: before 3.5.0 |
| CVE-2015-9538 | 6.5 | Nov 26 | The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection Affected: before 2.1.15 |
| CVE-2021-24293 | 6.1 | May 5 | In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_items via photocrati_ajax , after that the… Affected: before 3.1.11 |
| CVE-2024-5442 | 5.9 | Jul 13 | NextGEN Gallery < 3.59.3 - Admin+ Stored XSS Affected: before 3.59.3 |
| CVE-2015-9537 | 5.4 | Nov 26 | The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and… Affected: before 2.1.10 |
| CVE-2024-3097 | 5.3 | Apr 9 | WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure Affected: before 3.59.1 |
| CVE-2023-3279 | 4.9 | Oct 16 | NextGEN Gallery < 3.39 - Admin+ Local File Inclusion Affected: before 3.39 |
| CVE-2024-6393 | 4.8 | Nov 25 | NextGEN Gallery < 3.59.5 - Admin+ Stored XSS Affected: before 3.59.5 |
| CVE-2024-39627 | 4.8 | Aug 1 | WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 3.59.3 - Cross Site Scripting (XSS) vulnerability Affected: through 3.59.3 |
| CVE-2018-1000172 | 4.8 | Apr 30 | Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text Affected: through 2.2.30 |
| CVE-2015-9229 | 4.8 | Sep 12 | In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the… Affected: 2.1.15 |
| CVE-2024-2744 | 4.3 | May 17 | Nextgen Gallery < 3.59.1 - Admin+ Stored XSS Affected: before 3.59.1 |
| CVE-2022-38468 | 4.3 | Mar 1 | WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF) Affected: before 3.29 |
| CVE-2024-10545 | 3.5 | Feb 25 | NextGEN Gallery < 3.59.9 - Admin+ Stored XSS Affected: before 3.59.9 |
Showing 27