Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Güvenlik açıkları

• CVE-2019-14314kimlik doğrulamasız

  A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress.

  Kritik 9.8

• CVE-2016-10889kimlik doğrulamasız

  The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.

  Kritik 9.8

• CVE-2023-48328kimlik doğrulamasız · tıklama gerekir≤ 3.37

  WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2015-9228giriş gerekir

  In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter,

  Yüksek 8.8

• CVE-2026-1463yazar+≤ 4.0.4

  Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion

  Yüksek 8.8

• CVE-2025-13641katılımcı+≤ 3.59.12

  Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'

  Yüksek 8.8

• CVE-2026-94123kimlik doğrulamasız≤ 4.5.0

  WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability

  Yüksek 7.5

• CVE-2018-7586kimlik doğrulamasız

  In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured.

  Yüksek 7.5

• CVE-2026-28141kimlik doğrulamasız · tıklama gerekir≤ 4.2.3

  WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2015-9538giriş gerekir

  The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

  Orta 6.5

• CVE-2025-2537katılımcı+

  Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library

  Orta 6.4

• CVE-2024-5878katılımcı+

  Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library

  Orta 6.4

• CVE-2015-9537giriş gerekir

  The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thum

  Orta 5.4

• CVE-2024-3097kimlik doğrulamasız≤ 3.59

  WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure

  Orta 5.3

• CVE-2024-39627yüksek yetki≤ 3.59.3

  WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 3.59.3 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2018-1000172yüksek yetki

  Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text.

  Orta 4.8

• CVE-2022-38468kimlik doğrulamasız · tıklama gerekir≤ 3.28

  WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)

  Orta 4.3

• CVE-2026-6566abone+≤ 4.2.0

  Photo Gallery, Sliders, Proofing and Themes <= 4.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Image Deletion via REST API

  Orta 4.3

• CVE-2010-1186

  Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attacke

  Orta 4.3