Product by Imagely

    WordPress Gallery Plugin

    27 known vulnerabilities in WordPress Gallery Plugin (Imagely), 0 of them actively exploited (CISA KEV).

    Key figures

    27

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WordPress Gallery Plugin (Imagely)
    CriticalCVE-2019-14314

    Imagely NextGEN Gallery: SQL Injection

    		9.8
    CriticalCVE-2013-3684

    Imagely NextGEN Gallery: security vulnerability

    		9.8
    HighCVE-2013-0291

    NextGEN Gallery Plugin: security vulnerability

    		7.5
    MediumCVE-2024-3097

    Imagely NextGEN Gallery: Missing Authorization

    also in 1 other product

    		5.3
    HighCVE-2015-9228

    Imagely NextGEN Gallery: Unrestricted File Upload

    		8.8
    MediumCVE-2015-9538

    Imagely NextGEN Gallery: Path Traversal

    		6.5
    CriticalCVE-2016-10889

    Imagely NextGEN Gallery: SQL Injection

    		9.8
    HighCVE-2015-1784

    Nextgen-gallery: Unrestricted Upload of File with Dangerous Type

    		8.8
    HighCVE-2016-6565

    Imagely NextGen Gallery plugin: PHP Remote File Inclusion

    		7.5
    HighCVE-2018-7586

    Imagely NextGEN Gallery: security vulnerability

    		7.5
    HighCVE-2020-35942

    Imagely NextGEN Gallery: File Inclusion

    		8.8
    HighCVE-2023-3155

    NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete

    		7.2
    HighCVE-2023-3154

    NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization

    		7.5
    MediumCVE-2015-9537

    Imagely NextGEN Gallery: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2023-3279

    NextGEN Gallery < 3.39 - Admin+ Local File Inclusion

    		4.9
    MediumCVE-2021-24293

    NextGEN Gallery Pro < 3.1.11 - Reflected Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2020-35943

    Imagely NextGEN Gallery: Cross-Site Request Forgery (CSRF)

    		6.5
    MediumCVE-2015-1785

    Nextgen-gallery: Unrestricted Upload of File with Dangerous Type

    		6.5
    MediumCVE-2015-9229

    Imagely NextGEN Gallery: Cross-Site Scripting (XSS)

    		4.8
    MediumCVE-2024-5442

    NextGEN Gallery < 3.59.3 - Admin+ Stored XSS

    		5.9
    MediumCVE-2024-6393

    NextGEN Gallery < 3.59.5 - Admin+ Stored XSS

    		4.8
    MediumCVE-2018-1000172

    Imagely NextGEN Gallery: Cross-Site Scripting (XSS)

    		4.8
    MediumCVE-2024-39627

    Imagely NextGEN Gallery: Cross-site Scripting

    		5.9
    MediumCVE-2024-2744

    Nextgen Gallery < 3.59.1 - Admin+ Stored XSS

    		4.3
    LowCVE-2024-10545

    NextGEN Gallery < 3.59.9 - Admin+ Stored XSS

    		3.5

    All vulnerabilities in search

    All products by Imagely