Login Request a demo
NG
Product
NextGEN Gallery
by Imagely · last CVE Feb 25, 2025
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 3High 9Medium 14Low 1
Severity
All severities27Critical3High9Medium14Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add NextGEN Gallery to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-1785
6.5
1%
Jul 7
In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application
Affected: before 2.0.77.3
CVE-2020-35943
6.5
1%
Feb 9
A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload
Affected: before 3.5.0
CVE-2015-9538
6.5
10%
Nov 26
The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection
Affected: before 2.1.15
CVE-2021-24293
6.1
1%
May 5
In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_items via photocrati_ajax , after that the…
Affected: before 3.1.11
CVE-2024-5442
5.9
0%
Jul 13
NextGEN Gallery < 3.59.3 - Admin+ Stored XSS
Affected: before 3.59.3
CVE-2015-9537
5.4
1%
Nov 26
The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and…
Affected: before 2.1.10
CVE-2024-3097
5.3
38%
Apr 9
WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure
Affected: before 3.59.1
CVE-2023-3279
4.9
1%
Oct 16
NextGEN Gallery < 3.39 - Admin+ Local File Inclusion
Affected: before 3.39
CVE-2024-6393
4.8
0%
Nov 25
NextGEN Gallery < 3.59.5 - Admin+ Stored XSS
Affected: before 3.59.5
CVE-2024-39627
4.8
0%
Aug 1
WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 3.59.3 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.59.3
CVE-2018-1000172
4.8
1%
Apr 30
Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text
Affected: through 2.2.30
CVE-2015-9229
4.8
1%
Sep 12
In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the…
Affected: 2.1.15
CVE-2024-2744
4.3
0%
May 17
Nextgen Gallery < 3.59.1 - Admin+ Stored XSS
Affected: before 3.59.1
CVE-2022-38468
4.3
0%
Mar 1
WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: before 3.29
Showing 14