Vulnerability index

Browse CVEs

19 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nextgen Gallery MEDIUM 5.9
CVE-2024-5442

The Photo Gallery, Sliders, Proofing and WordPress plugin before 3.59.3 does not sanitise and escape some of its settings, which could allow high p…

Fix: 3.59.3+
Fix from $1,600 2024-07-13
Nextgen Gallery MEDIUM 5.3
CVE-2024-3097EPSS 38%

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on…

Fix: 3.59.1+
Fix from $1,600 2024-04-09
Nextgen Gallery HIGH 8.8
CVE-2023-48328

Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery allows Cross Site Request Forgery.This issue af…

Fix: 3.39+
Fix from $1,950 2023-11-30
Nextgen Gallery HIGH 7.5
CVE-2023-3154

The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the `g…

Fix: 3.39+
Fix from $1,950 2023-10-16
Nextgen Gallery HIGH 7.2
CVE-2023-3155

The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation…

Fix: 3.39+
Fix from $1,950 2023-10-16
Nextgen Gallery HIGH 8.8
CVE-2015-1784

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web applica…

Fix: 2.0.77.3+
Fix from $1,950 2022-07-07
Nextgen Gallery MEDIUM 6.5
CVE-2015-1785

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web applica…

Fix: 2.0.77.3+
Fix from $1,600 2022-07-07
Nextgen Gallery MEDIUM 6.1
CVE-2021-24293

In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_items via photocrati_ajax , af…

Fix: 3.1.11+
Fix from $1,600 2021-05-05
Nextgen Gallery MEDIUM 6.5
CVE-2020-35943

A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload. (It is possible to bypass CSRF…

Fix: 3.5.0+
Fix from $1,600 2021-02-09
Nextgen Gallery HIGH 8.8
CVE-2020-35942

A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusion via se…

Fix: 3.5.0+
Fix from $1,950 2021-02-09
Nextgen Gallery CRITICAL 9.8
CVE-2013-3684EPSS 19%

NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload

Fix: 1.9.13+
Fix from $2,300 2020-02-11
Nextgen Gallery HIGH 7.5
CVE-2013-0291EPSS 16%

NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability

No fix yet
Fix from $1,950 2020-01-30
Nextgen Gallery MEDIUM 6.5
CVE-2015-9538EPSS 10%

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

Fix: 2.1.15+
Fix from $1,600 2019-11-26
Nextgen Gallery MEDIUM 5.4
CVE-2015-9537

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, …

Fix: 2.1.10+
Fix from $1,600 2019-11-26
Nextgen Gallery CRITICAL 9.8
CVE-2019-14314EPSS 43%

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability…

Fix: 3.2.10+
Fix from $2,300 2019-08-27
Nextgen Gallery CRITICAL 9.8
CVE-2016-10889

The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.

Fix: 2.1.57+
Fix from $2,300 2019-08-14
Nextgen Gallery HIGH 7.5
CVE-2016-6565

The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POS…

Fix: 2.1.57+
Fix from $1,950 2018-07-13
Nextgen Gallery HIGH 7.5
CVE-2018-7586

In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured.

Fix: after 2.2.46
Fix from $1,950 2018-03-01
Nextgen Gallery HIGH 8.8
CVE-2015-9228

In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a fil…

No fix yet
Fix from $1,950 2017-09-12