IM
Vendor
Imagely
29
CVEs
0
On KEV
0
New 30D
Products
NG9.8
NextGEN Gallery
Imagely
27 CVEs0 on KEV0 new
WG8.8
WordPress Gallery Plugin – NextGEN Gallery
Imagely
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-10545 | NG Nextgen Gallery Imagely | 3.5 | Feb 25 | NextGEN Gallery < 3.59.9 - Admin+ Stored XSS |
| CVE-2024-6393 | NG Nextgen Gallery Imagely | 4.8 | Nov 25 | NextGEN Gallery < 3.59.5 - Admin+ Stored XSS |
| CVE-2024-39627 | NG NextGEN Gallery Imagely | 4.8 | Aug 1 | WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 3.59.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5442 | NG Nextgen Gallery Imagely | 5.9 | Jul 13 | NextGEN Gallery < 3.59.3 - Admin+ Stored XSS |
| CVE-2024-2744 | NG Nextgen Gallery Imagely | 4.3 | May 17 | Nextgen Gallery < 3.59.1 - Admin+ Stored XSS |
| CVE-2024-3097 | NG Nextgen Gallery Imagely | 5.3 | Apr 9 | WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure |
| CVE-2023-48328 | WG WordPress Gallery Plugin – NextGEN Gallery Imagely | 8.8 | Nov 30 | WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-3279 | NG Nextgen Gallery Imagely | 4.9 | Oct 16 | NextGEN Gallery < 3.39 - Admin+ Local File Inclusion |
| CVE-2023-3155 | NG Nextgen Gallery Imagely | 7.2 | Oct 16 | NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete |
| CVE-2023-3154 | NG Nextgen Gallery Imagely | 7.5 | Oct 16 | NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization |
| CVE-2022-38468 | WG WordPress Gallery Plugin – NextGEN Gallery Imagely | 4.3 | Mar 1 | WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2015-1784 | NG Nextgen Gallery Imagely | 8.8 | Jul 7 | In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application |
| CVE-2015-1785 | NG Nextgen Gallery Imagely | 6.5 | Jul 7 | In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application |
| CVE-2021-24293 | NG Nextgen Gallery Imagely | 6.1 | May 5 | In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_items via photocrati_ajax , after that the… |
| CVE-2020-35943 | NG Nextgen Gallery Imagely | 6.5 | Feb 9 | A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload |
| CVE-2020-35942 | NG Nextgen Gallery Imagely | 8.8 | Feb 9 | A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusion via settings modification, leading… |
| CVE-2013-3684 | NG Nextgen Gallery Imagely | 9.8 | Feb 11 | NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload |
| CVE-2013-0291 | NG Nextgen Gallery Imagely | 7.5 | Jan 30 | NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability |
| CVE-2015-9538 | NG Nextgen Gallery Imagely | 6.5 | Nov 26 | The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection |
| CVE-2015-9537 | NG Nextgen Gallery Imagely | 5.4 | Nov 26 | The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and… |
| CVE-2019-14314 | NG Nextgen Gallery Imagely | 9.8 | Aug 27 | A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress |
| CVE-2016-10889 | NG Nextgen Gallery Imagely | 9.8 | Aug 14 | The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name |
| CVE-2016-6565 | NG Nextgen Gallery Imagely | 7.5 | Jul 13 | The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an… |
| CVE-2018-1000172 | NG Nextgen Gallery Imagely | 4.8 | Apr 30 | Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text |
| CVE-2018-7586 | NG Nextgen Gallery Imagely | 7.5 | Mar 1 | In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured |
| CVE-2015-9229 | NG Nextgen Gallery Imagely | 4.8 | Sep 12 | In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the… |
| CVE-2015-9228 | NG Nextgen Gallery Imagely | 8.8 | Sep 12 | In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from… |