Imagely vulnerabilities

Products

• Nextgen Gallery 27
• Nextgen Gallery 5
• Nextgen Gallery Plugin 2
• Wordpress Gallery Plugin – Nextgen Gallery 2

Newest

• imagely nextgen gallery WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability CVE-2026-94123 7.5 HighSeptember 30, 2026
• imagely nextgen gallery WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-28141 7.1 HighAugust 6, 2026
• awesomemotive nextgen gallery NextGEN Gallery - SQL Injection CVE-2026-9059 9.3 CriticalMay 20, 2026
• imagely nextgen gallery, unknown photo gallery, sliders, proofing and themes +1 more NextGEN Gallery < 3.59.9 - Admin+ Stored XSS CVE-2024-10545 3.5 LowFebruary 25, 2025
• imagely nextgen gallery, unknown photo gallery, sliders, proofing and themes +1 more NextGEN Gallery < 3.59.5 - Admin+ Stored XSS CVE-2024-6393 4.8 MediumNovember 25, 2024
• imagely nextgen gallery WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 3.59.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-39627 5.9 MediumAugust 1, 2024
• imagely nextgen gallery, unknown photo gallery, sliders, proofing and themes +1 more NextGEN Gallery < 3.59.3 - Admin+ Stored XSS CVE-2024-5442 5.9 MediumJuly 13, 2024
• imagely nextgen gallery Nextgen Gallery < 3.59.1 - Admin+ Stored XSS CVE-2024-2744 4.3 MediumMay 17, 2024
• imagely nextgen gallery, smub photo gallery, sliders, proofing and themes – nextgen gallery +1 more WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure CVE-2024-3097 EPSS 38.0% 5.3 MediumApril 9, 2024
• imagely nextgen gallery, wordpress gallery plugin – nextgen gallery +1 more WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-48328 4.3 MediumNovember 30, 2023
• imagely nextgen gallery, unknown wordpress gallery plugin +1 more NextGEN Gallery < 3.39 - Admin+ Local File Inclusion CVE-2023-3279 4.9 MediumOctober 16, 2023
• imagely nextgen gallery, unknown wordpress gallery plugin +1 more NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete CVE-2023-3155 7.2 HighOctober 16, 2023
• imagely nextgen gallery, unknown wordpress gallery plugin +1 more NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization CVE-2023-3154 7.5 HighOctober 16, 2023
• imagely nextgen gallery, wordpress gallery plugin – nextgen gallery +1 more WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-38468 4.3 MediumMarch 1, 2023
• imagely nextgen gallery In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow... CVE-2015-1784 8.8 HighJuly 7, 2022
• imagely nextgen gallery In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow... CVE-2015-1785 6.5 MediumJuly 7, 2022
• imagely nextgen gallery, unknown nextgen gallery pro +1 more NextGEN Gallery Pro < 3.1.11 - Reflected Cross-Site Scripting (XSS) CVE-2021-24293 6.1 MediumMay 5, 2021
• imagely nextgen gallery A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for... CVE-2020-35943 6.5 MediumFebruary 9, 2021
• imagely nextgen gallery A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for... CVE-2020-35942 8.8 HighFebruary 9, 2021
• imagely nextgen gallery NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload CVE-2013-3684 Public exploit EPSS 19.2% 9.8 CriticalFebruary 11, 2020
• imagely nextgen gallery plugin, nextgen gallery, nextgen gallery plugin authors gallery plugin +2 more NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability CVE-2013-0291 Public exploit EPSS 15.6% 7.5 HighJanuary 30, 2020
• imagely nextgen gallery The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving... CVE-2015-9537 5.4 MediumNovember 26, 2019
• imagely nextgen gallery The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path... CVE-2015-9538 EPSS 10.1% 6.5 MediumNovember 26, 2019
• imagely nextgen gallery A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.10 for... CVE-2019-14314 Public exploit EPSS 43.4% 9.8 CriticalAugust 27, 2019
• imagely nextgen gallery The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name. CVE-2016-10889 9.8 CriticalAugust 14, 2019
• imagely nextgen gallery plugin, nextgen gallery +1 more The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 may execute code from an uploaded malicious file CVE-2016-6565 7.5 HighJuly 13, 2018
• imagely nextgen gallery Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS)... CVE-2018-1000172 4.8 MediumApril 30, 2018
• imagely nextgen gallery In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured. CVE-2018-7586 7.5 HighMarch 1, 2018
• imagely nextgen gallery In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for... CVE-2015-9229 4.8 MediumSeptember 12, 2017
• imagely nextgen gallery In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file... CVE-2015-9228 8.8 HighSeptember 12, 2017