İçeriğe atla
Noroxi

Imagely kayıtları

imagely üreticisine ait 27 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %3,7
Pre-auth RCE
2
Düzeltme kaydı olan
%29,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

27 kayıt
  • CVE-2019-14314
    52Planlayın

    A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress.

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    imagely · nextgen gallery27 Ağu 2019

  • CVE-2013-3684
    45Planlayın

    NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    imagely · nextgen gallery11 Şub 2020

  • CVE-2016-10889
    40Planlayın

    The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.

    KritikCVSS 9,8İstismar yokEPSS %2

    imagely · nextgen gallery14 Ağu 2019

  • CVE-2015-9228
    36İzleyin

    In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter,

    YüksekCVSS 8,8İstismar yokEPSS %4

    imagely · nextgen gallery12 Eyl 2017

  • CVE-2015-1784
    36İzleyin

    In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the we

    YüksekCVSS 8,8İstismar yokEPSS %2

    imagely · nextgen gallery7 Tem 2022

  • CVE-2013-0291
    35İzleyin

    NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    imagely · nextgen gallery30 Oca 2020

  • CVE-2020-35942
    35İzleyin

    A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusi

    YüksekCVSS 8,8İstismar yokEPSS %1

    imagely · nextgen gallery9 Şub 2021

  • CVE-2023-48328
    35İzleyin

    WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    imagely · nextgen gallery30 Kas 2023

  • CVE-2024-3097
    32İzleyin

    WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure

    OrtaCVSS 5,3Kavram kanıtıEPSS %38

    imagely · nextgen gallery9 Nis 2024

  • CVE-2016-6565
    31İzleyin

    The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 may execute code from an uploaded malicious file

    YüksekCVSS 7,5İstismar yokEPSS %3

    imagely · nextgen gallery13 Tem 2018

  • CVE-2018-7586
    31İzleyin

    In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured.

    YüksekCVSS 7,5İstismar yokEPSS %2

    imagely · nextgen gallery1 Mar 2018

  • CVE-2023-3154
    30İzleyin

    NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization

    YüksekCVSS 7,5İstismar yokEPSS %1

    imagely · nextgen gallery16 Eki 2023

  • CVE-2015-9538
    29İzleyin

    The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

    OrtaCVSS 6,5SilahlaştırılmışEPSS %10

    imagely · nextgen gallery26 Kas 2019

  • CVE-2023-3155
    28İzleyin

    NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete

    YüksekCVSS 7,2İstismar yokEPSS %1

    imagely · nextgen gallery16 Eki 2023

  • CVE-2020-35943
    26İzleyin

    A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload.

    OrtaCVSS 6,5İstismar yokEPSS %1

    imagely · nextgen gallery9 Şub 2021

  • CVE-2015-1785
    26İzleyin

    In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the we

    OrtaCVSS 6,5İstismar yokEPSS %1

    imagely · nextgen gallery7 Tem 2022

  • CVE-2021-24293
    24İzleyin

    NextGEN Gallery Pro < 3.1.11 - Reflected Cross-Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %1

    imagely · nextgen gallery5 May 2021

  • CVE-2024-5442
    23İzleyin

    NextGEN Gallery < 3.59.3 - Admin+ Stored XSS

    OrtaCVSS 5,9İstismar yokEPSS %0

    imagely · nextgen gallery13 Tem 2024

  • CVE-2015-9537
    21İzleyin

    The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thum

    OrtaCVSS 5,4İstismar yokEPSS %1

    imagely · nextgen gallery26 Kas 2019

  • CVE-2015-9229
    19İzleyin

    In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated

    OrtaCVSS 4,8İstismar yokEPSS %1

    imagely · nextgen gallery12 Eyl 2017

  • CVE-2023-3279
    19İzleyin

    NextGEN Gallery < 3.39 - Admin+ Local File Inclusion

    OrtaCVSS 4,9İstismar yokEPSS %1

    imagely · nextgen gallery16 Eki 2023

  • CVE-2018-1000172
    19İzleyin

    Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text.

    OrtaCVSS 4,8İstismar yokEPSS %1

    imagely · nextgen gallery30 Nis 2018

  • CVE-2024-6393
    19İzleyin

    NextGEN Gallery < 3.59.5 - Admin+ Stored XSS

    OrtaCVSS 4,8İstismar yokEPSS %0

    imagely · nextgen gallery25 Kas 2024

  • CVE-2024-39627
    19İzleyin

    WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 3.59.3 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 4,8İstismar yokEPSS %0

    imagely · nextgen gallery1 Ağu 2024

  • CVE-2024-2744
    17İzleyin

    Nextgen Gallery < 3.59.1 - Admin+ Stored XSS

    OrtaCVSS 4,3İstismar yokEPSS %0

    imagely · nextgen gallery17 May 2024