CVE-2026-118191

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handlejob function in all versions up to, and including, 4.5.5 This makes it possible for authenticated attackers, with...

CVE-2026-118191

The NextGEN Gallery plugin for WordPress (versions up to and including 4.5.5 ) is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_job function. This flaw allows authenticated attackers with custom-level access (or higher) to delete files on the server,...

CVE-2026-118191 Photo Gallery, Sliders, Proofing and Themes <= 4.5.5 - Authenticated (Custom+) Arbitrary File Deletion via 'task_list' and 'app_config' Parameters

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handlejob function in all versions up to, and including, 4.5.5 This makes it possible for authenticated attackers, with...

EUVD-2026-124987

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handlejob function in all versions up to, and including, 4.5.5 This makes it possible for authenticated attackers, with...