Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

WordPress Plugin

WP Plugin Nextgen Gallery

A WordPress plugin is a piece of software that plugs into your WordPress site. Plugins can add new functionality or extend existing functionality on your site allowing you to create virtually any kind of website from ecommerce stores to portfolios to directory sites.

Official Site:

https://wordpress.org/plugins/nextgen-gallery

Severity Summary:

Critical: 7 High: 6 Medium: 15 Information: 2
Reference
Title
Severity
CVE-2020-35943
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Request Forgery Vulnerabilities
Critical
CVE-2020-35942
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Request Forgery Vulnerabilities
Critical
CVE-2013-3684
WordPress Plugin NextGEN Gallery-WordPress Gallery Arbitrary File Upload
Critical
CVE-2015-1784
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Vulnerabilities
Critical
CVE-2015-1785
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Vulnerabilities
Critical
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Remote Code Execution
Critical
CVE-2016-6565
WordPress Plugin NextGEN Gallery-WordPress Gallery Local File Inclusion
Critical
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Arbitrary File Upload
High
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Privilege Escalation
High
CVE-2019-14314
WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection
High
CVE-2013-0291
WordPress Plugin NextGEN Gallery-WordPress Gallery Information Disclosure
High
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery PHP Object Injection
High
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection
High
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Scripting Vulnerabilities
Medium
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Security Bypass
Medium
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Cross-Site Scripting
Medium
CVE-2010-1186
WordPress Plugin NextGEN Gallery-WordPress Gallery xml/media-rss.php Cross-Site Scripting
Medium
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Local File Inclusion
Medium
CVE-2008-7175
WordPress Plugin NextGEN Gallery-WordPress Gallery nggallery-manage-gallery HTML Injection
Medium
CVE-2015-9537
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Scripting Vulnerabilities
Medium
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal
Medium
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Directory Traversal
Medium
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Scripting Vulnerabilities
Medium
CVE-2012-3414
WordPress Plugin NextGEN Gallery-WordPress Gallery swfupload.swf Cross-Site Scripting
Medium
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Gallery Path Field Cross-Site Scripting
Medium
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple HTML Injection Vulnerabilities
Medium
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities
Medium
CVE-2022-38468
WordPress Plugin WordPress Gallery-NextGEN Gallery Cross-Site Request Forgery
Medium
No CVE number
WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability
Information
CVE-2018-7586
WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability
Information