WordPress Vulnerability Scanner WPSec
Vulnerabilities / Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery vulnerabilities

Advisories WPSec published for Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery. Other sources may list more. Its attack surface: Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-16 WPSEC-2026-1128 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.5.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image IPTC Metadata Medium 6.4 4.5.3
2026-10-16 WPSEC-2026-1127 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.5.2 - Authenticated (Contributor+) Local File Inclusion via Shortcode Attributes High 8.8 4.5.3
2026-10-16 WPSEC-2026-1126 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.5.2 - Authenticated (Author+) Insecure Direct Object Reference to Album Modification and Deletion via Lightroom and XML-RPC Medium 5.4 4.5.3
2026-10-16 WPSEC-2026-1125 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.5.2 - Authenticated (Contributor+) PHP Object Injection via Shortcode Template Attribute High 7.5 4.5.3
2026-10-02 WPSEC-2026-0358 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.5.1 - Authenticated (Author+) Mass Assignment to Arbitrary Post Overwrite/Deletion and Gallery Path Change via REST API Medium 5.4 4.5.2
2026-10-02 WPSEC-2026-0357 Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.5.1 - Authenticated (Author+) Path Traversal via ZIP Archive Upload Low 3.1 4.5.2

License: CC BY 4.0