Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery vulnerabilities
5 known vulnerabilities in Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery from Smub. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Improper Limitation of a Pathname to a Restricted Directory
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_job function in all versions up to, and including, 4.5.5 This makes it possib
- 8.8 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Unrestricted Upload of File with Dangerous Type
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the render_image function. This is due to unrestricted mass assignment of caller-suppl
- 7.5 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Unrestricted Upload of File with Dangerous Type
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacy_render function. This is due to broken authorization on the Lightroom galle
- 8.8 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Improper Control of Filename for Include/Require Statement in PHP Program
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.3 via the 'template' parameter in gallery shortcodes. This makes it possible for authenticate
- 8.8 High severity
Photo Gallery, Sliders, Proofing and Themes –…: Improper Control of Filename for Include/Require Statement in PHP Program
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.59.12 via the 'template' shortcode parameter. This is due to insufficient path validation that