Imagely vulnerabilities
We track 2 vulnerabilities in Imagely products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 30, 2023.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Imagely vulnerabilities
- 8.8 High severity
WordPress Gallery Plugin – NextGEN Gallery: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin – NextGEN Gallery: from n/a through 3.37.
- 7.2 High severity
WordPress Gallery Plugin: Files or Directories Accessible to External Parties
The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the `gallery_edit` function, allowing an attacker to access arbitrary resources on the server.