Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 57
Reset filtersNextGEN Gallery <= 3.37 - Authenticated (Admininistrator+) Arbitrary File Read and Deletion in gallery_edit
WordPress Gallery Plugin – NextGEN Gallery <= 3.38 - Authenticated (Admin+) Local File Inclusion
NextGen GalleryView <= 0.5.5 - Reflected Cross-Site Scripting
NextGen GalleryView <= 0.5.5 - Cross-Site Request Forgery
NextGEN Gallery <= 3.28 - Cross-Site Request Forgery leading to Post Thumbnail Change
NextGen Gallery Pro <= 3.1.9 - Reflected Cross-Site Scripting
WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery to Arbitrary File Upload
WordPress Gallery Plugin – NextGEN Gallery <= 3.4.7 - Cross-Site Request Forgery
NextGEN Gallery Sell Photo <= 1.0.4 - Stored Cross-Site Scripting
NextGEN Gallery <= 3.2.10 - SQL Injection
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
NextGen Gallery <= 3.1.5 - PHP Object Injection
WordPress Gallery Plugin – NextGEN Gallery <= 2.2.46 - Sensitive Information Disclosure
NextGEN Gallery <= 2.2.44 - Cross-Site Scripting via image alt and title text
NextGen Gallery <= 2.1.77 - SQL Injection
NextGen Gallery <= 2.1.56 - Remote File Inclusion
NextGEN Gallery <= 2.1.56 - Authenticated Local File Inclusion & SQL injection
NextGen Gallery <= 2.1.10 - Unrestricted File Upload
WordPress Gallery Plugin – NextGEN Gallery <= 2.1.15 - Authenticated (Admin+) Cross-Site Scripting
NextGen Gallery <= 2.1.9 - Cross-Site Scripting
NextGen Gallery <= 2.1.7 - Path Traversal
NextGen Gallery <= 2.1.10 - Local File Inclusion
WordPress Gallery Plugin – NextGEN Gallery < 2.0.77.3 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.