Nextgen gallery
This hub aggregates every CVE we track for Nextgen gallery, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
31
CVEs tracked
3
Critical
9
High
0
In CISA KEV
Severity distribution
MEDIUM17HIGH9CRITICAL3LOW1
Monthly trend
0
1
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
1
0
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Nextgen gallery.
- CVE-2026-28141WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-9059NextGEN Gallery - SQL Injection
- CVE-2024-10545NextGEN Gallery < 3.59.9 - Admin+ Stored XSS3.5
- CVE-2024-6393NextGEN Gallery < 3.59.5 - Admin+ Stored XSS4.8
- CVE-2024-39627WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 3.59.3 - Cross Site Scripting (XSS) vulnerability5.9
- CVE-2024-5442NextGEN Gallery < 3.59.3 - Admin+ Stored XSS5.9
- CVE-2024-2744Nextgen Gallery < 3.59.1 - Admin+ Stored XSS4.3
- CVE-2024-3097WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure5.3
- CVE-2023-48328WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)4.3
- CVE-2023-3279NextGEN Gallery < 3.39 - Admin+ Local File Inclusion4.9
- CVE-2023-3155NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete7.2
- CVE-2023-3154NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization7.5
- CVE-2022-38468WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)4.3
- CVE-2015-1784In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the applica...8.8
- CVE-2015-1785In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the applica...6.5
Product normalization is registry-driven with AI assist and human review. How it works