NextGEN Gallery vulnerabilities

2 known vulnerabilities in NextGEN Gallery from Imagely. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WordPress Gallery Plugin – NextGEN Gallery: Cross-Site Request Forgery

  CVE-2023-48328Nov 30, 2023Imagely

  Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin – NextGEN Gallery: from n/a through 3.37.

• 7.2 High severity

  WordPress Gallery Plugin: Files or Directories Accessible to External Parties

  CVE-2023-3155Oct 16, 2023WordPress Gallery PluginEPSS 1.02%

  The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the `gallery_edit` function, allowing an attacker to access arbitrary resources on the server.