NextGEN Gallery

Missing Authorization to Unauthenticated Information Disclosure vulnerability <= 3.59

5.3

8 April, 2024

Cross Site Request Forgery (CSRF) vulnerability <= 3.37

4.3

23 November, 2023

Admin+ Local File Inclusion vulnerability < 3.39

6.0

17 October, 2023

Admin+ Arbitrary File Read and Delete vulnerability < 3.39

6.7

17 October, 2023

Admin+ PHAR Deserialization vulnerability <= 3.39

6.6

17 October, 2023