WordPress NextGEN Gallery 1.9.10 - Cross-Site Scripting Detection

WordPress NextGEN Gallery 1.9.10 plugin contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

CVE-2026-0675

CVE-2026-0675 is rejected by its CVE Numbering Authority and not an active vulnerability entry.

WordPress NextGEN Gallery Plugin < 3.59.5 is vulnerable to Cross Site Scripting (XSS)

Software NextGEN Gallery Type Plugin Vulnerable versions 3.59.5 Fixed in 3.59.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6393 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0e6857ff3928 Credits WPscan Required privileg...

WordPress NextGEN Gallery Plugin <= 3.3.6 is vulnerable to Cross Site Scripting (XSS)

Software NextGEN Gallery Type Plugin Vulnerable versions = 3.3.6 Fixed in 3.4.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 1895dd78f517 Credits Rafie Muhammad Patchstack Required...

CVE-2023-34185 WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

CVE-2023-34185: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

CVE-2023-35098: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software NextGen GalleryView Type Plugin Vulnerable versions = 0.5.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-34185 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cfce11c606a0 Credits LEE SE HYOUNG...

CVE-2015-9538

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wpnextgengalleyfileread.rb 2024-02-28 10:41:08+00:00| seen| https://t.me/ctinow/195303 2025-10-23 21:12:58+00:00| seen|...

WordPress NextGen Cu3er Gallery Plugin - Information Disclosure

This plugin is prone to an Iinformation disclosure vulnerability. Solution Update plugin...

WordPress NextGEN Gallery 2.0.63 Shell Upload Vulnerability

WordPress NextGEN Gallery plugin version 2.0.63 suffers from a remote shell upload vulnerability. Exploit Title: Wordpress NextGEN Gallery Plugin 2.0.63 Arbitrary File Upload Author: SANTHO @s4n7h0 Vendor Homepage: http://wordpress.org/plugins/nextgen-gallery/ Category: WebApp / CMS / Wordpress...

WordPress NextGen Gallery跨站脚本漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: WordPress NextGen swfupload.swf Cross Site Scripting vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com...