Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery, with AI-generated Chinese analysis, references, and POCs.

Vendor: smub

CVE IDTitleCVSSSeverityPublished
CVE-2026-6566 Photo Gallery, Sliders, Proofing and Themes <= 4.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Image Deletion via REST API CWE-639 4.3 Medium2026-05-20
CVE-2026-1463 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion CWE-98 8.8 High2026-03-18
CVE-2025-13641 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template' CWE-98 8.8 High2025-12-18
CVE-2024-3097 WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure CWE-862 5.3 Medium2024-04-09

All 4 known CVE vulnerabilities affecting Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery with full Chinese analysis, references, and POCs where available.