Login Request a demo
NG
Product
NextGEN Gallery
by Imagely · last CVE Feb 25, 2025
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 3High 9Medium 14Low 1
Severity
All severities27Critical3High9Medium14Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add NextGEN Gallery to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-48328
8.8
0%
Nov 30
WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: before 3.39
CVE-2015-1784
8.8
2%
Jul 7
In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application
Affected: before 2.0.77.3
CVE-2020-35942
8.8
1%
Feb 9
A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusion via settings modification, leading…
Affected: before 3.5.0
CVE-2015-9228
8.8
4%
Sep 12
In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from…
Affected: 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4; 1.5.5; +34 more
CVE-2023-3154
7.5
1%
Oct 16
NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization
Affected: before 3.39
CVE-2013-0291
7.5
16%
Jan 30
NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability
Affected: 1.9.10; 1.9.11
CVE-2016-6565
7.5
3%
Jul 13
The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an…
Affected: before 2.1.57
CVE-2018-7586
7.5
2%
Mar 1
In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured
Affected: through 2.2.46
CVE-2023-3155
7.2
1%
Oct 16
NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete
Affected: before 3.39
Showing 9