WordPress Vulnerability Listing

MediumCVE-2026-9059

Photo Gallery, Sliders, Proofing and Themes – NextGEN < 4.2.1 - Authenticated (Admin+) SQL Injection

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: [*, 4.2.1)

Vulnerability type: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected software, patched versions and attribution

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to SQL Injection in all versions up to 4.2.1 (exclusive) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: [*, 4.2.1)

Patched versions: 4.2.1

Researcher credit: Joshua Martinelle

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: May 20, 2026
CVSS: 4.9

MediumCVE-2026-6566

Photo Gallery, Sliders, Proofing and Themes <= 4.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Image Deletion via REST API

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-4.2.0

Vulnerability type: CWE-639 Authorization Bypass Through User-Controlled Key

Affected software, patched versions and attribution

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 4.2.0. This is due to insufficient object-level authorization in the image deletion REST flow where the permission callback for DELETE /imagely/v1/images/{id} only checks 'NextGEN Manage gallery' permissions and does not enforce gallery ownership or 'NextGEN Manage others gallery' permissions. This makes it possible for authenticated attackers, with Subscriber-level privileges and 'NextGEN Manage gallery' capability, to delete gallery images belonging to other users as well as their associated image files from disk when deleteImg is enabled (default).

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-4.2.0

Patched versions: 4.2.1

Researcher credit: Bao Luu Gia Nguyen

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: May 19, 2026
CVSS: 4.3

HighCVE-2026-1463

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-4.0.4

Vulnerability type: CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Affected software, patched versions and attribution

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.3 via the 'template' parameter in gallery shortcodes. This makes it possible for authenticated attackers, with Author-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-4.0.4

Patched versions: 4.0.5

Researcher credit: Athiwat Tiprasaharn (Jitlada), Itthidej Aramsri (Boeing777), Waris Damkham

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: March 17, 2026
CVSS: 8.8

HighCVE-2025-13641

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.59.12

Vulnerability type: CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Affected software, patched versions and attribution

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.59.12 via the 'template' shortcode parameter. This is due to insufficient path validation that allows absolute paths to be provided. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary PHP files on the server, bypassing web server restrictions like .htaccess. Successful exploitation could lead to information disclosure, code execution in the WordPress context, and potential remote code execution if combined with arbitrary file upload capabilities.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.59.12

Patched versions: 4.0.0

Researcher credit: Athiwat Tiprasaharn (Jitlada)

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: December 17, 2025
CVSS: 8.8

MediumCVE-2025-2537

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library

Auto Thickbox: Currently marked unpatchedYouTube Embed, Playlist and Popup by WpDevArt: Currently marked unpatchedPhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.5; *-2.6.7; *-3.59.11

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled ThickBox JavaScript library (version 3.1) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Auto Thickbox

Affected versions: *-3.5

Patched versions: Not supplied

YouTube Embed, Playlist and Popup by WpDevArt

Affected versions: *-2.6.7

Patched versions: Not supplied

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.59.11

Patched versions: 3.59.12

Researcher credit: Webbernaut

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: July 3, 2025
CVSS: 6.4

MediumCVE-2024-5878

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library

Simplelightbox: Currently marked unpatchedPhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-2.14.4; *-3.59.4

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled SimpleLightbox JavaScript library (version 2.1.5) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Simplelightbox

Affected versions: *-2.14.4

Patched versions: Not supplied

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.59.4

Patched versions: 3.59.5

Researcher credit: Webbernaut

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: May 19, 2025
CVSS: 6.4

MediumCVE-2024-10545

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.8 - Authenticated (Admin+) Stored Cross-Site Scripting

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.59.8

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.59.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.59.8

Patched versions: 3.59.9

Researcher credit: Erwan LR

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: February 4, 2025
CVSS: 4.4

MediumCVE-2024-5020

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Affected versions: *-2.4.8; *-4.1.1; *-1.9.12; *-7.5.47.7212; *-1.8.15; *-1.0.286; *-3.3.9; *-2.0.11

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Responsive Lightbox & Gallery

Affected versions: *-2.4.8

Patched versions: 2.4.9

WPC Smart Quick View for WooCommerce

Affected versions: *-4.1.1

Patched versions: 4.1.2

Accordion Slider

Affected versions: *-1.9.12

Patched versions: 1.9.13

FV Flowplayer Video Player

Affected versions: *-7.5.47.7212

Patched versions: 7.5.48.7212

Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More

Affected versions: *-1.8.15

Patched versions: 1.8.16

Colibri Page Builder

Affected versions: *-1.0.286

Patched versions: 1.0.288

Gallery by Visual Portfolio

Affected versions: *-3.3.9

Patched versions: 3.3.10

Getwid – Gutenberg Blocks

Affected versions: *-2.0.11

Patched versions: 2.0.12

Firelight Lightbox

Affected versions: *-2.3.3

Patched versions: 2.3.4

Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder

Affected versions: *-4.3.1

Patched versions: 4.3.2

FancyBox for WordPress

Affected versions: *-3.3.4

Patched versions: 3.3.5

Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel

Affected versions: *-2.6.8

Patched versions: 2.6.9

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

Affected versions: *-1.15.27

Patched versions: 1.15.28

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.59.4

Patched versions: 3.59.5

Easy Social Feed Premium

Affected versions: *-6.6.2

Patched versions: Not supplied

Researcher credit: Webbernaut

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: December 3, 2024
CVSS: 6.4

MediumCVE-2024-6393

NextGEN Gallery <= 3.39.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.39.4

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.39.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.39.4

Patched versions: 3.39.5

Researcher credit: Dmitrii Ignatyev

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: November 4, 2024
CVSS: 4.4

MediumCVE-2024-39627

NextGEN Gallery <= 3.59.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.59.3

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

The NextGEN Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.59.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only impacts multi-site installations and installations where unfiltered_html has been disabled.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.59.3

Patched versions: 3.59.4

Researcher credit: Ibnu Ubaeydillah

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: July 22, 2024
CVSS: 4.4

MediumCVE-2024-5442

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Gallery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.59.2

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery settings in all versions up to, and including, 3.59.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.59.2

Patched versions: 3.59.3

Researcher credit: Krugov Artyom

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: June 22, 2024
CVSS: 4.4

MediumCVE-2024-2744

Nextgen Gallery <= 3.59 - Authenticated (Administrator+) Stored Cross-Site Scripting

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.59

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

The NextGEN Gallery – Create an Amazing Photo Gallery in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.59 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.59

Patched versions: 3.59.1

Researcher credit: Dmitrii Ignatyev

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: April 26, 2024
CVSS: 4.4

MediumCVE-2024-3097

WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.59

Vulnerability type: CWE-862 Missing Authorization

Affected software, patched versions and attribution

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_item function in versions up to, and including, 3.59. This makes it possible for unauthenticated attackers to extract sensitive data including EXIF and other metadata of any image uploaded through the plugin.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.59

Patched versions: 3.59.1

Researcher credit: Peng Zhou

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: April 5, 2024
CVSS: 5.3

MediumCVE-2023-48328

NextGEN Gallery <= 3.37 - Cross-Site Request Forgery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.37

Vulnerability type: CWE-352 Cross-Site Request Forgery (CSRF)

Affected software, patched versions and attribution

The NextGEN Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.37. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to dismiss notices via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.37

Patched versions: 3.39

Researcher credit: R3N0

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: November 23, 2023
CVSS: 4.3

MediumCVE-2023-3279

WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) Local File Inclusion

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.38

Vulnerability type: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected software, patched versions and attribution

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.38 via the 'Select View' field in the plugin's developer tools. This makes it possible for authenticated attackers, with administrator-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.38

Patched versions: 3.39

Researcher credit: Alex Sanford

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: September 25, 2023
CVSS: 4.9

MediumCVE-2023-3155

NextGEN Gallery <= 3.37 - Authenticated (Admininistrator+) Arbitrary File Read and Deletion in gallery_edit

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.37

Vulnerability type: CWE-552 Files or Directories Accessible to External Parties

Affected software, patched versions and attribution

The NextGEN Gallery plugin for WordPress is vulnerable to Arbitrary File Read and Deletion in versions up to, and including, 3.37. This is due to insufficient input validation within the gallery_edit function. This makes it possible for authenticated attackers, with administrator-level privileges and above, to read and delete arbitrary files.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.37

Patched versions: 3.39

Researcher credit: Linwz

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: September 25, 2023
CVSS: 6.5

HighCVE-2023-3154

WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) PHAR Deserialization

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.38

Vulnerability type: CWE-502 Deserialization of Untrusted Data

Affected software, patched versions and attribution

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and including, 3.38 via deserialization of untrusted input in the gallery_edit function. This makes it possible for authenticated attackers, with administrative-level access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.38

Patched versions: 3.39

Researcher credit: Linwz

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: September 25, 2023
CVSS: 7.2

MediumCVE-2022-38468

NextGEN Gallery <= 3.28 - Cross-Site Request Forgery leading to Post Thumbnail Change

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.28

Vulnerability type: CWE-352 Cross-Site Request Forgery (CSRF)

Affected software, patched versions and attribution

The NextGEN Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.28. This is due to missing or incorrect nonce validation on the 'ajax_set_post_thumbnail' and 'createNewThumb' functions. This makes it possible for unauthenticated attackers to create and set thumbnails on posts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.28

Patched versions: 3.29

Researcher credit: István Márton

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: February 14, 2023
CVSS: 4.3

HighCVE-2020-35942

WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.4.7

Vulnerability type: CWE-352 Cross-Site Request Forgery (CSRF)

Affected software, patched versions and attribution

A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusion via settings modification, leading to Remote Code Execution and XSS. (It is possible to bypass CSRF protection by simply not including a nonce parameter.)

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.4.7

Patched versions: 3.5.0

Researcher credit: Ram

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: December 17, 2020
CVSS: 8.8

HighCVE-2020-35943

WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery to Arbitrary File Upload

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.4.7

Vulnerability type: CWE-352 Cross-Site Request Forgery (CSRF)

Affected software, patched versions and attribution

A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload. (It is possible to bypass CSRF protection by simply not including a nonce parameter.)

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.4.7

Patched versions: 3.5.0

Researcher credit: Ram

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: December 17, 2020
CVSS: 8.8

CriticalCVE-2019-14314

NextGEN Gallery <= 3.2.10 - SQL Injection

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: [*, 3.2.11)

Vulnerability type: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected software, patched versions and attribution

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: [*, 3.2.11)

Patched versions: 3.2.11

Researcher credit: Tin Duong

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: August 27, 2019
CVSS: 9.8

High

Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update

Affected versions: [*, 1.9.3); *-1.0.1; *-0.1.9; *; *-1.0; *-1.0.0; [*, 1.1.4); *-1.0

Vulnerability type: CWE-862 Missing Authorization

Affected software, patched versions and attribution

The Freemius SDK for WordPress is vulnerable to authorization bypass due to a missing capability check on the _get_db_option and _set_db_option functions in versions up to, and including, 2.2.3. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change site settings and potentially take over the site.

Ultimeter

Affected versions: [*, 1.9.3)

Patched versions: 1.9.3

Past Events Extension

Affected versions: *-1.0.1

Patched versions: Not supplied

WordPress Cloaking – Show & Create Geo-Targeted Custom HTML Plugin – GeoRequest

Affected versions: *-0.1.9

Patched versions: Not supplied

Content Slider for WP Posts (Section Slider)

Affected versions: *

Patched versions: Not supplied

KRSP Frontend File Uploader

Affected versions: *-1.0

Patched versions: Not supplied

Online Booking for Barbershops and Salons

Affected versions: *-1.0.0

Patched versions: Not supplied

Premmerce Wholesale Pricing for WooCommerce

Affected versions: [*, 1.1.4)

Patched versions: 1.1.4

Any Popup – Popup Forms, Optins & Ads

Affected versions: *-1.0

Patched versions: Not supplied

enhanced-catalog-images-for-woocommerce

Affected versions: *-1.0.1

Patched versions: Not supplied

Error Log Monitor

Affected versions: [*, 1.6.5)

Patched versions: 1.6.5

FIT: Featured Image Toolkit

Affected versions: *-1.0.3

Patched versions: Not supplied

WP Advanced Comment

Affected versions: *-0.3

Patched versions: Not supplied

WP Private Media

Affected versions: *-1.0.1

Patched versions: Not supplied

Device Frame

Affected versions: *-1.0.0

Patched versions: Not supplied

ConsultPress Lite

Affected versions: *-1.2.3

Patched versions: Not supplied

WordPress Animation Plugin – Animated Everything

Affected versions: *-1.3.2

Patched versions: Not supplied

WooRocks Magic Content

Affected versions: *-1.0.17

Patched versions: Not supplied

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder

Affected versions: [*, 1.8.3)

Patched versions: 1.8.3

Livemesh Addons by Elementor

Affected versions: [*, 2.6)

Patched versions: 2.6

DeMomentSomTres Address

Affected versions: *-2.1

Patched versions: Not supplied

Funnelmentals

Affected versions: [*, 1.2.9)

Patched versions: 1.2.9

Better Robots.txt – AI-Ready Crawl Control & Bot Governance

Affected versions: [*, 1.2.6)

Patched versions: 1.2.6

GFireM Fields

Affected versions: *-1.1.7

Patched versions: Not supplied

Simple Giveaways – Grow your business, email lists and traffic with contests

Affected versions: [*, 2.18.0)

Patched versions: 2.18.0

EDD Tab Manager

Affected versions: [*, 1.3.1)

Patched versions: 1.3.1

GFireM Action After

Affected versions: *-1.1.6

Patched versions: Not supplied

a-staff – Team member showcase plugin for WordPress

Affected versions: *-1.2.2

Patched versions: Not supplied

wGauge – Free Version

Affected versions: *-1.0.0

Patched versions: Not supplied

Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)

Affected versions: [*, 2.3.2)

Patched versions: 2.3.2

Social Gallery Lite

Affected versions: *-3.1

Patched versions: Not supplied

Premmerce Wishlist for WooCommerce

Affected versions: [*, 1.1.3)

Patched versions: 1.1.3

Starfish Review Generation & Marketing for WordPress

Affected versions: [*, 2.0.1)

Patched versions: 2.0.1

Advanced Classifieds & Directory Pro

Affected versions: [*, 1.6.3)

Patched versions: 1.6.3

WooCommerce Next Order Coupon

Affected versions: *-0.4.0

Patched versions: Not supplied

Addendio LITE – Find WordPress plugins and themes

Affected versions: *-1.2.2

Patched versions: Not supplied

Price Bands for WooCommerce

Affected versions: *-1.0.4

Patched versions: Not supplied

Perelandra Sermons

Affected versions: *-1.1.0

Patched versions: Not supplied

WP Munich Blocks – Gutenberg Blocks for WordPress

Affected versions: [*, 0.7.3)

Patched versions: 0.7.3

go-fetch-jobs-jobengine

Affected versions: *-1.0

Patched versions: Not supplied

GFireM Advance Search

Affected versions: *-1.2.2

Patched versions: Not supplied

Speculor

Affected versions: *-1.2.0

Patched versions: Not supplied

Remove WP Update Nags

Affected versions: [*, 1.4.0)

Patched versions: 1.4.0

Content Collector

Affected versions: *-1.1.1

Patched versions: Not supplied

Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel

Affected versions: [*, 1.6.17)

Patched versions: 1.6.17

Stop User Enumeration

Affected versions: [*, 1.3.20)

Patched versions: 1.3.20

Social Share Icons & Social Share Buttons

Affected versions: [*, 3.0.4)

Patched versions: 3.0.4

TinyMCE Annotate

Affected versions: *-1.1.2

Patched versions: Not supplied

Woo Admin Product Notes

Affected versions: *-1.0.0

Patched versions: Not supplied

Run time Image resizing

Affected versions: *-1.1

Patched versions: Not supplied

Add Pinterest conversion tags for Pinterest Ads + Site verification

Affected versions: [*, 1.0.2)

Patched versions: 1.0.2

One Page Blocks

Affected versions: *-1.0.0

Patched versions: Not supplied

Page Studio Lite Plugin

Affected versions: *-1.0.6

Patched versions: Not supplied

Shuban

Affected versions: *-1.1.2

Patched versions: Not supplied

DeMomentSomTres Grid Archive

Affected versions: *-2.1

Patched versions: Not supplied

Random Sorting Order for WooCommerce

Affected versions: *-1.0

Patched versions: Not supplied

Inbound Brew

Affected versions: *-1.9.4

Patched versions: Not supplied

WP Photo Effects

Affected versions: [*, 1.2.3)

Patched versions: 1.2.3

Turbo Widgets

Affected versions: *-2.0.0

Patched versions: Not supplied

Press Elements – Widgets for Elementor

Affected versions: *-1.7.2

Patched versions: Not supplied

BuddyForms EasyPin

Affected versions: *-1.0.1

Patched versions: Not supplied

WP Author Bio

Affected versions: *-1.5.5

Patched versions: Not supplied

RW Divi Unite Gallery

Affected versions: *-1.0

Patched versions: Not supplied

Revolution for Elementor

Affected versions: *-0.0.19

Patched versions: Not supplied

Product Tables for WooCommerce: Quickster

Affected versions: *-1.0.2

Patched versions: Not supplied

Get feedback from visitors – WP Feedback Suite Plugin

Affected versions: *-1.0.5

Patched versions: Not supplied

Content Aware Sidebars – Fastest Widget Area Plugin

Affected versions: [*, 3.8.1)

Patched versions: 3.8.1

Bani

Affected versions: *-1.0.7

Patched versions: Not supplied

Fast WordPress

Affected versions: *-1.0.3

Patched versions: Not supplied

Import Social Statistics

Affected versions: *-1.0.2

Patched versions: Not supplied

BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages

Affected versions: [*, 3.2.6.1)

Patched versions: 3.2.6.1

Affiliate Link Builder Plugin for Amazon Associates – Review Engine

Affected versions: *-1.0.41

Patched versions: Not supplied

BAVOKO SEO Tools – All-in-One WordPress SEO

Affected versions: [*, 2.1.9.8)

Patched versions: 2.1.9.8

Ultimate Widgets Light

Affected versions: *-1.5.9.4

Patched versions: Not supplied

Insert or Embed Articulate Content into WordPress

Affected versions: [*, 4.2997)

Patched versions: 4.2997

Nitek Carousel Slider Cool Transitions

Affected versions: *-1.1.0

Patched versions: Not supplied

WP Activity Log

Affected versions: [*, 3.3.1.2)

Patched versions: 3.3.1.2

Contact Form for WordPress- Cybrosys

Affected versions: *-5.0

Patched versions: Not supplied

Widgets for SiteOrigin

Affected versions: [*, 1.4.3)

Patched versions: 1.4.3

NEXUS

Affected versions: *-2.0

Patched versions: Not supplied

WordPress FAQ Plugin – WPWorx

Affected versions: *-2.0.0

Patched versions: Not supplied

Brand

Affected versions: *-1.9.1

Patched versions: Not supplied

Premmerce Variation Swatches for WooCommerce

Affected versions: [*, 1.1)

Patched versions: 1.1

Sprout Clients – CRM and Lead Management

Affected versions: *-3.1

Patched versions: 3.2

Kanzu Support Desk – WordPress Helpdesk Plugin

Affected versions: *-2.4.7

Patched versions: Not supplied

Expire tags

Affected versions: *-1.1

Patched versions: Not supplied

WordPress Reviews by ReviewPress

Affected versions: *-1.0.5

Patched versions: Not supplied

WP Mobile Menu – The Mobile-Friendly Responsive Menu

Affected versions: [*, 2.7.3)

Patched versions: 2.7.3

CP Simple Newsletter

Affected versions: *-1.1

Patched versions: Not supplied

DeMomentSomTres Categories

Affected versions: *-201704251008

Patched versions: Not supplied

WP Relevant Ads

Affected versions: *-1.0.0

Patched versions: Not supplied

Giveaways for woocommerce

Affected versions: *-1.0.0

Patched versions: Not supplied

DeMomentSomTres Media Tools Auto

Affected versions: *-2.0

Patched versions: Not supplied

Drop Shadow Boxes

Affected versions: [*, 1.7.2)

Patched versions: 1.7.2

404 to 301 – Redirect Manager, 404 Error Logs & Notifications

Affected versions: [*, 3.0.2)

Patched versions: 3.0.2

Before and After Product Images for WooCommerce

Affected versions: *-1.0.3

Patched versions: Not supplied

Customer Chat Facebook

Affected versions: *-1.1.1

Patched versions: Not supplied

Delete Duplicate Posts

Affected versions: [*, 4.1.9.5)

Patched versions: 4.1.9.5

Post Snippets – Custom WordPress Code Snippets Customizer

Affected versions: [*, 3.0.6)

Patched versions: 3.0.6

Helpie FAQ — Accordion, Docs & Knowledge Base

Affected versions: [*, 0.7.2)

Patched versions: 0.7.2

Livemesh SiteOrigin Widgets

Affected versions: [*, 2.5.2)

Patched versions: 2.5.2

Gravity Forms Sticky List

Affected versions: *-1.5.2

Patched versions: Not supplied

WP fail2ban – Advanced Security

Affected versions: [*, 4.0.5)

Patched versions: 4.0.5

Image Photo Gallery Final Tiles Grid

Affected versions: [*, 3.3.57)

Patched versions: 3.3.57

Lightbox & Modal Popup WordPress Plugin – FooBox

Affected versions: [*, 2.6.4)

Patched versions: 2.6.4

Contact Form 7 Multi-Step Forms

Affected versions: [*, 3.0.9)

Patched versions: 3.0.9

DeMomentSomTres Classify on Publish

Affected versions: *-201703020805

Patched versions: Not supplied

wp-buddha-free-adwords

Affected versions: *-1.0.0

Patched versions: Not supplied

Purus

Affected versions: *-1.2.2

Patched versions: Not supplied

MailChimp Manager

Affected versions: *-1.0.2

Patched versions: Not supplied

Automatic Post Categories

Affected versions: *-1.0

Patched versions: Not supplied

Global Income Stats from Freemius

Affected versions: *-1.0.0

Patched versions: Not supplied

Cryptocurrency Portfolio Tracker

Affected versions: *-0.0.17

Patched versions: Not supplied

Magic Content for Siteorigins Pagebuilder

Affected versions: *-1.0.1

Patched versions: Not supplied

Master Blocks – Gutenberg Site Builder

Affected versions: *-1.0.4

Patched versions: Not supplied

Widgets on Pages and Posts

Affected versions: *-1.4.0

Patched versions: Not supplied

SheetPress – Manage WordPress Meta data with Google Sheets

Affected versions: *-1.1

Patched versions: Not supplied

FTC Disclosure

Affected versions: *-2.0

Patched versions: Not supplied

WP Pro Counter

Affected versions: *-1.1

Patched versions: Not supplied

Nugget by Ingot: Easy, automated and native A/B testing for everyone

Affected versions: *-1.0.0

Patched versions: Not supplied

XPoster – Share to Bluesky and Mastodon

Affected versions: [*, 3.3.0)

Patched versions: 3.3.0

Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces

Affected versions: [*, 2.2.3.1)

Patched versions: 2.2.3.1

Custom Registration and Custom Login Forms with New Recaptcha

Affected versions: *-1.1

Patched versions: Not supplied

freemage

Affected versions: *-1.0

Patched versions: Not supplied

ClimateClick: Climate Action for all

Affected versions: *-1.0.9.21

Patched versions: 1.0.9.22

SnazzyAdmin WP Admin Theme

Affected versions: *-1.0.2

Patched versions: Not supplied

Ant Admin Notices for Team

Affected versions: [*, 1.0.4)

Patched versions: 1.0.4

Easy Digital Downloads – Courses

Affected versions: [*, 0.1.1)

Patched versions: 0.1.1

WP Affiliate Disclosure

Affected versions: [*, 1.1.4)

Patched versions: 1.1.4

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: [*, 3.1.7)

Patched versions: 3.1.7

Multilist Subscribe for Sendy

Affected versions: *-1.6.1

Patched versions: Not supplied

Easy Code Snippets

Affected versions: [*, 1.0.1)

Patched versions: 1.0.1

Premmerce Product Filter for WooCommerce

Affected versions: [*, 3.2)

Patched versions: 3.2

Easy Watermark

Affected versions: [*, 0.7.1)

Patched versions: 0.7.1

CP Image Gallery

Affected versions: *-1.0.1

Patched versions: Not supplied

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: February 25, 2019
CVSS: 8.8

High

NextGen Gallery <= 3.1.5 - PHP Object Injection

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-3.1.5

Vulnerability type: CWE-502 Deserialization of Untrusted Data

Affected software, patched versions and attribution

The NextGen Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.1.5. This is due to the plugin unserializing serialized data obtained via user supplied input from the `sortorder` parameter. This makes it possible for authenticated attackers to call arbitrary PHP Objects and achieve remote code execution when the right gadgets are available.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-3.1.5

Patched versions: 3.1.6

Researcher credit: Slavco Mihajloski

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: February 4, 2019
CVSS: 8.8

HighCVE-2018-7586

WordPress Gallery Plugin – NextGEN Gallery <= 2.2.46 - Sensitive Information Disclosure

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-2.2.46

Vulnerability type: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected software, patched versions and attribution

In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-2.2.46

Patched versions: 2.2.50

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: March 2, 2018
CVSS: 7.5

MediumCVE-2018-1000172

NextGEN Gallery <= 2.2.44 - Cross-Site Scripting via image alt and title text

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery: Currently marked unpatched

Affected versions: *-2.2.44

Vulnerability type: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected software, patched versions and attribution

Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45.

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Affected versions: *-2.2.44

Patched versions: 2.2.45

Researcher credit: Zhouyuan Yang

Applicable copyright and licence notices

This record contains material that is subject to copyright

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

Licence reference

This record contains material that is subject to copyright

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

Licence reference

Original Wordfence record

Published: February 14, 2018
CVSS: 4.8

43 vulnerability records

Photo Gallery, Sliders, Proofing and Themes – NextGEN < 4.2.1 - Authenticated (Admin+) SQL Injection

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Photo Gallery, Sliders, Proofing and Themes <= 4.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Image Deletion via REST API

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library

Auto Thickbox

YouTube Embed, Playlist and Popup by WpDevArt

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library

Simplelightbox

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.8 - Authenticated (Admin+) Stored Cross-Site Scripting

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Responsive Lightbox & Gallery

WPC Smart Quick View for WooCommerce

Accordion Slider

FV Flowplayer Video Player

Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More

Colibri Page Builder

Gallery by Visual Portfolio

Getwid – Gutenberg Blocks

Firelight Lightbox

Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder

FancyBox for WordPress

Carousel, Slider, Photo Gallery with Lightbox, Video Slider, by WP Carousel

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Easy Social Feed Premium

NextGEN Gallery <= 3.39.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

NextGEN Gallery <= 3.59.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Gallery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Nextgen Gallery <= 3.59 - Authenticated (Administrator+) Stored Cross-Site Scripting

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

NextGEN Gallery <= 3.37 - Cross-Site Request Forgery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) Local File Inclusion

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

NextGEN Gallery <= 3.37 - Authenticated (Admininistrator+) Arbitrary File Read and Deletion in gallery_edit

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) PHAR Deserialization

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

NextGEN Gallery <= 3.28 - Cross-Site Request Forgery leading to Post Thumbnail Change

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery to Arbitrary File Upload

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

NextGEN Gallery <= 3.2.10 - SQL Injection

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update

Ultimeter

Past Events Extension

WordPress Cloaking – Show & Create Geo-Targeted Custom HTML Plugin – GeoRequest

Content Slider for WP Posts (Section Slider)

KRSP Frontend File Uploader

Online Booking for Barbershops and Salons

Premmerce Wholesale Pricing for WooCommerce

Any Popup – Popup Forms, Optins & Ads

enhanced-catalog-images-for-woocommerce

Error Log Monitor

FIT: Featured Image Toolkit

WP Advanced Comment

WP Private Media

Device Frame

ConsultPress Lite

WordPress Animation Plugin – Animated Everything

WooRocks Magic Content

Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder

Livemesh Addons by Elementor