WordPress vulnerability database
Security programs Bounty leaderboard API Protect
Report
🎉 Check out our updated Community and new Developer plans!
NextGEN Gallery Logo

NextGEN Gallery

Plugin

Changelog

Claim

VDP

Developer

Imagely

Current version

3.41

Installations

500,000

Last updated

11 hours ago

Vulnerability history

0 present
23 patched

Reflected Cross Site Scripting (XSS) vulnerability <= 3.3.6

7.1

19 July, 2023

CrossSite Request Forgery (CSRF) <= 3.28

4.3

14 February, 2023

CrossSite Request Forgery (CSRF) vulnerability leading to file upload <= 3.4.7

8.8

8 February, 2021

CrossSite Request Forgery (CSRF) leading to XSS and RCE via file upload and LFI <= 3.4.7

8.8

8 February, 2021

SQL Injection vulnerability <= 3.2.8

9.8

27 August, 2019

Solutions

WordPress security Vulnerability database Vulnerability API Bug bounty program Plugin auditing Active security programs NEW

WordPress security

Pricing & features For care plans For hosts For plugins NEW Documentation

Patchstack

About us Careers Media Kit Articles & insight Whitepaper 2022 NEW

Social

DPA Privacy Policy Terms & Conditions © 2023 Patchstack

Solutions

WordPress security Vulnerability database Vulnerability API Bug bounty program Plugin auditing Active security programs NEW

WordPress security

Pricing & features For care plans For hosts For plugins NEW Documentation

Patchstack

About us Careers Media Kit Articles & insight Whitepaper 2022 NEW

Social

Let us know if we have missed a vulnerability reported elsewhere

Report arrow right Close

Thank you for contributing!

Successfully submit vulnerabilities and receive an invite to our Alliance platform.

Learn more arrow right Close