PG
Product
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
10
CVEs
0
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 4Medium 6Low 0
Watch
Add Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-2537 | 6.4 | Jul 3 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library Affected: through 3.59.11 |
| CVE-2024-5878 | 6.4 | May 20 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library Affected: through 3.59.4 |
| CVE-2024-5020 | 6.4 | Dec 4 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library Affected: through 3.59.4 |
| CVE-2026-116563 New | 5.4 | Oct 31 | Photo Gallery, Sliders, Proofing and Themes <= 4.5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment `title` Attribute via Shutter Lightbox innerHTML Affected: through 4.5.4 |
| CVE-2024-3097 | 5.3 | Apr 9 | WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure Affected: through 3.59 |
| CVE-2026-6566 | 4.3 | May 20 | Photo Gallery, Sliders, Proofing and Themes <= 4.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Image Deletion via REST API Affected: through 4.2.0 |
Showing 6