All 4 CVE vulnerabilities found in NextGEN Gallery, with AI-generated Chinese analysis, references, and POCs.
Vendor: Imagely
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-94123 | WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability CWE-22 | 7.5 | High | 2026-09-30 |
| CVE-2026-28141 | WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2026-08-06 |
| CVE-2026-9059 | NextGEN Gallery - SQL Injection CWE-89 | - | - | 2026-05-20 |
| CVE-2024-39627 | WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin <= 3.59.3 - Cross Site Scripting (XSS) vulnerability CWE-79 | 5.9 | Medium | 2024-08-01 |
All 4 known CVE vulnerabilities affecting NextGEN Gallery with full Chinese analysis, references, and POCs where available.