NGG Smart Image Search vulnerabilities | LiveThreat CVE Feed

Product

NGG Smart Image Search

by wpo-HR · last CVE Aug 19, 2026

CVEs

On KEV

9.3

Max CVSS

New 30D

Severity mix

Critical 2High 0Medium 3Low 0

Severity

Exploitation

Watch

Add NGG Smart Image Search to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-58027	6.5	0%	Sep 22	WordPress NGG Smart Image Search Plugin <= 3.4.3 - Cross Site Scripting (XSS) Vulnerability Affected: through 3.4.3
CVE-2025-47503	6.5	0%	May 7	WordPress NGG Smart Image Search plugin <= 3.3.3 - Cross Site Scripting (XSS) Vulnerability Affected: through 3.3.3
CVE-2024-13658	5.4	0%	Feb 12	The NGG Smart Image Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hr_SIS_nextgen_searchbox' shortcode in all versions up to, and… Affected: before 3.3.2