¿Es seguro Nextgen Gallery?

Qué hace este plugin

• Slug: nextgen-gallery
• 400000+ instalaciones activas

galleryimage galleryphoto galleryslideshowwordpress gallery plugin

Estado de mantenimiento

• Última versión conocida: 4.2.3
• Requiere PHP: 7.0+
• PHP máximo soportado (analizado): 8.4

Vulnerabilidades conocidas

33 CVEs conocidos registrados para Nextgen Gallery.

CVE-2026-6566

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 4.2.0. This is due to insufficient object-level authorization in the image deletion REST flow where the permission callback for DELETE /imagely/v1/images/{id} only checks 'NextGEN Manage gallery' permissions and does not enforce gallery ownership or 'NextGEN Manage others gallery' permissions. This makes it possible for authenticated attackers, with Subscriber-level privileges and 'NextGEN Manage gallery' capability, to delete gallery images belonging to other users as well as their associated image files from disk when deleteImg is enabled (default).

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

CVE-2025-13641

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.59.12 via the 'template' shortcode parameter. This is due to insufficient path validation that allows absolute paths to be provided. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary PHP files on the server, bypassing web server restrictions like .htaccess. Successful exploitation could lead to information disclosure, code execution in the WordPress context, and potential remote code execution if combined with arbitrary file upload capabilities.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.12

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled ThickBox JavaScript library (version 3.1) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2024-10545

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.59.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.5

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled FancyBox JavaScript library (versions 1.3.4 to 3.5.7) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

CVE-2024-6393

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.39.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2024-39627

The NextGEN Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.59.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only impacts multi-site installations and installations where unfiltered_html has been disabled.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2024-5442

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Gallery settings in all versions up to, and including, 3.59.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

+ 58 vulnerabilidades conocidas más

CVE	Vulnerabilidad	Tipo	Gravedad	Afectadas	Corregido en	Publicado	Estado
CVE-2024-2744	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.1	Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS)	Media 4,3	< 3.59.1	3.59.1	2024-04-26	✓ corregido en la última versión
CVE-2024-3097	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.1	Falta de control de autorización	Media 5,3	< 3.59.1	3.59.1	2024-04-05	✓ corregido en la última versión
CVE-2023-48328	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.39	Falsificación de petición en sitios cruzados (CSRF)	Media 4,3	< 3.39	3.39	2023-11-23	✓ corregido en la última versión
CVE-2023-3155	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.39	Archivos o directorios accesibles a terceros	Alta 7,2	< 3.39	3.39	2023-09-25	✓ corregido en la última versión
CVE-2023-3154	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.39	Deserialización de datos no confiables	Alta 7,5	< 3.39	3.39	2023-09-25	✓ corregido en la última versión
CVE-2023-3279	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.39	Limitación incorrecta de una ruta a un directorio restringido (Path Traversal)	Media 4,9	< 3.39	3.39	2023-09-25	✓ corregido en la última versión
CVE-2023-33999	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.4.7	Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS)	Alta 7,1	< 3.4.7	3.4.7	2023-07-18	✓ corregido en la última versión
CVE-2022-38468	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.29	Falsificación de petición en sitios cruzados (CSRF)	Media 4,3	< 3.29	3.29	2023-02-14	✓ corregido en la última versión
CVE-2020-35942	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.5.0	Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS)	Alta 8,8	< 3.5.0	3.5.0	2020-12-17	✓ corregido en la última versión
CVE-2020-35943	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.5.0	Falsificación de petición en sitios cruzados (CSRF)	Media 6,5	< 3.5.0	3.5.0	2020-12-17	✓ corregido en la última versión
CVE-2019-14314	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.2.11	Neutralización incorrecta de elementos especiales en un comando SQL (inyección SQL)	Crítica 9,8	< 3.2.11	3.2.11	2019-08-27	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.1.7	—	Desconocido	< 3.1.7	3.1.7	2019-03-02	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.1.7	—	Desconocido	< 3.1.7	3.1.7	2019-02-25	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.1.6	—	Desconocido	< 3.1.6	3.1.6	2019-02-04	✓ corregido en la última versión
CVE-2018-7586	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.2.50	Limitación incorrecta de una ruta a un directorio restringido (Path Traversal)	Alta 7,5	< 2.2.50	2.2.50	2018-03-01	✓ corregido en la última versión
CVE-2018-1000172	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.2.45	Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS)	Media 4,8	< 2.2.45	2.2.45	2018-02-14	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.79	—	Desconocido	< 2.1.79	2.1.79	2017-02-17	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.60	—	Desconocido	< 2.1.60	2.1.60	2016-11-28	✓ corregido en la última versión
CVE-2016-10889	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.57	Neutralización incorrecta de elementos especiales en un comando SQL (inyección SQL)	Crítica 9,8	< 2.1.57	2.1.57	2016-11-15	✓ corregido en la última versión
CVE-2016-6565	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.57	Validación incorrecta de la entrada	Alta 7,5	< 2.1.57	2.1.57	2016-11-15	✓ corregido en la última versión
CVE-2015-9228	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.15	Carga de archivos sin restricción de tipo peligroso	Alta 8,8	< 2.1.15	2.1.15	2015-12-23	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.9	—	Desconocido	< 2.1.9	2.1.9	2015-10-07	✓ corregido en la última versión
CVE-2015-9229	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.23	Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS)	Media 4,8	< 2.1.23	2.1.23	2015-09-14	✓ corregido en la última versión
CVE-2015-9537	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.10	Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS)	Media 5,4	< 2.1.10	2.1.10	2015-08-31	✓ corregido en la última versión
CVE-2015-9538	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.15	Limitación incorrecta de una ruta a un directorio restringido (Path Traversal)	Media 6,5	< 2.1.15	2.1.15	2015-08-28	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.9	—	Desconocido	< 2.1.9	2.1.9	2015-08-28	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.66	—	Desconocido	< 2.0.66	2.0.66	2015-05-15	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.7	—	Desconocido	< 2.0.7	2.0.7	2015-05-15	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.8	—	Desconocido	< 1.9.8	1.9.8	2015-05-15	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.0	—	Desconocido	< 2.0.0	2.0.0	2015-05-15	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.0	—	Desconocido	< 2.0.0	2.0.0	2015-05-15	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.1	—	Desconocido	< 1.9.1	1.9.1	2015-05-15	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.8.4	—	Desconocido	< 1.8.4	1.8.4	2015-05-15	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.7.4	—	Desconocido	< 1.7.4	1.7.4	2015-05-15	✓ corregido en la última versión
CVE-2015-1784	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.77.3	Carga de archivos sin restricción de tipo peligroso	Alta 8,8	< 2.0.77.3	2.0.77.3	2015-03-25	✓ corregido en la última versión
CVE-2015-1785	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.77.3	Falsificación de petición en sitios cruzados (CSRF)	Media 6,5	< 2.0.77.3	2.0.77.3	2015-03-25	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.66	—	Desconocido	< 2.0.66	2.0.66	2014-05-20	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.1	—	Desconocido	< 2.0.1	2.0.1	2014-02-19	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.7	—	Desconocido	< 2.0.7	2.0.7	2014-02-18	✓ corregido en la última versión
CVE-2013-3684	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.13	Carga de archivos sin restricción de tipo peligroso	Crítica 9,8	< 1.9.13	1.9.13	2013-06-12	✓ corregido en la última versión
CVE-2013-0291	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] >= 1.9.10 - <= 1.9.11	Exposición de información sensible a un actor no autorizado	Alta 7,5	1.9.10–1.9.11	1.9.11	2013-02-14	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.11	—	Desconocido	< 1.9.11	1.9.11	2013-01-08	✓ corregido en la última versión
CVE-2012-3414	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.7	Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS)	Desconocido	< 1.9.7	1.9.7	2012-06-14	✓ corregido en la última versión
CVE-2010-1186	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.5.2	Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS)	Desconocido	< 1.5.2	1.5.2	2010-04-06	✓ corregido en la última versión
CVE-2008-7175	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] <= 0.96	Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS)	Desconocido	< 0.96	0.96	2008-06-07	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.5	Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS)	Media 6,4	< 3.59.5	3.59.5	0000-00-00	✓ corregido en la última versión
CVE-2026-1463	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 4.0.5	—	Desconocido	< 4.0.5	4.0.5	0000-00-00	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.1.7	—	Desconocido	< 3.1.7	3.1.7	—	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.1.6	—	Desconocido	< 3.1.6	3.1.6	—	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.79	—	Desconocido	< 2.1.79	2.1.79	—	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.9	—	Desconocido	< 2.1.9	2.1.9	—	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.0	—	Desconocido	< 2.0.0	2.0.0	—	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.7.4	—	Desconocido	< 1.7.4	1.7.4	—	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.8	—	Desconocido	< 1.9.8	1.9.8	—	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.8.4	—	Desconocido	< 1.8.4	1.8.4	—	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.1	—	Desconocido	< 1.9.1	1.9.1	—	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.7	—	Desconocido	< 2.0.7	2.0.7	—	✓ corregido en la última versión
—	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.66	—	Desconocido	< 2.0.66	2.0.66	—	✓ corregido en la última versión

CVE-2024-2744

The NextGEN Gallery – Create an Amazing Photo Gallery in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.59 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2024-3097

Update the WordPress NextGEN Gallery plugin to the latest available version (at least 3.59.1). Peng Zhou discovered and reported this Broken Access Control vulnerability in WordPress NextGEN Gallery Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has been fixed in version 3.59.1. Have additional information or questions about this entry? Get in touch.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2023-48328

Update the WordPress NextGEN Gallery plugin to the latest available version (at least 3.39). FearZzZz discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress NextGEN Gallery Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has been fixed in version 3.39.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2023-3155

Update the WordPress NextGEN Gallery plugin to the latest available version (at least 3.39). Linwz from DEVCORE discovered and reported this Arbitrary File Deletion vulnerability in WordPress NextGEN Gallery Plugin. This could allow a malicious actor to delete files from your website. If core files are deleted from your website, it could cause your site to break and stop functioning. This vulnerability has been fixed in version 3.39.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2023-3154

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and including, 3.38 via deserialization of untrusted input in the gallery_edit function. This makes it possible for authenticated attackers, with administrative-level access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2023-3279

The WordPress Gallery Plugin – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.38 via the 'Select View' field in the plugin's developer tools. This makes it possible for authenticated attackers, with administrator-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2023-33999

Update the WordPress NextGEN Gallery plugin to the latest available version. Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress NextGEN Gallery Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 3.4.7.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2022-38468

Update the WordPress NextGEN Gallery plugin to the latest available version (at least 3.29). Lana Codes discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress NextGEN Gallery Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. For example a password change which will then allow the malicious actor to login into the admin account. This vulnerability has been fixed in version 3.29.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2020-35942

It was possible to bypass the "is_authorized_request" function used to control access to plugin settings by sending a request without a nonce parameter. This could be used to upload arbitrary code to a CSS file with a double extension (e.g. file.php.css), and could also be used to include the uploaded file as a gallery template, resulting in RCE and XSS when visiting a gallery using the selected template.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

CVE-2020-35943

It was possible to bypass the "validate_ajax_request" function used to control access to ajax functions by sending a request without a nonce parameter. This could be used to upload arbitrary code to an image file. Although the uploaded file must be a valid image, it is possible to include PHP code in a valid image, which would be executed if included using the vulnerability in CVE-2020-35942

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

CVE-2019-14314

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.1.7

Authenticated Option Update vulnerability (Fremius Library security issue) found in WordPress NextGEN Gallery plugin (versions <= 3.1.6).

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.1.7

The Freemius SDK for WordPress is vulnerable to authorization bypass due to a missing capability check on the _get_db_option and _set_db_option functions in versions up to, and including, 2.2.3. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change site settings and potentially take over the site.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.1.6

The NextGen Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.1.5. This is due to the plugin unserializing serialized data obtained via user supplied input from the `sortorder` parameter. This makes it possible for authenticated attackers to call arbitrary PHP Objects and achieve remote code execution when the right gadgets are available.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2018-7586

The changelog states: "Secured: Gallery paths and the ability to manage tags Kudos: ElevenPaths (Telefonica cibersecurity Unit)"

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

CVE-2018-1000172

Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting (XSS) vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.79

The NextGen Gallery plugin for WordPress is vulnerable to SQL Injection via the ‘$container_ids’ string in versions up to, and including, 2.1.77 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.60

WordPress NextGEN Gallery plugin v2.1.59 is prone to authenticated remote code execution (RCE) vulnerability. It allows an attacker to change the file name style_settings[CSSfile] value on the /wp-admin/admin.php?page=ngg_other_options page. If an attacker change the file extension to PHP, he can execute arbitrary code. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2016-10889

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Authenticated Local File Inclusion (LFI) & SQLi security vulnerability.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

CVE-2016-6565

The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user to read arbitrary files from the server, or execute arbitrary code on the server in some circumstances (dependent on server configuration).

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

CVE-2015-9228

In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.9

Because of this vulnerability, attackers can access system files and other unauthorized files on the server. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2015-9229

In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the images[1][alttext] parameter.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

CVE-2015-9537

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and template.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

CVE-2015-9538

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Path Traversal security vulnerability.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.9

The NextGen Gallery plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 2.1.7 via the browse_folder AJAX action and the 'dir' parameter. This allows authenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.66

This plugin is prone to arbitrary file upload vulnerability. Upgrade the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.7

An unauthenticated POST request to a particular URI with a particular parameter lists the contents of arbitrary directories. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.8

This plugin is prone to a cross site scripting vulnerability in swfupload.swf . Upgrade the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.0

Because of this vulnerability, attackers can disclose certain system information. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.0

This plugin is prone to a cross site scripting vulnerability via gallerypath parameter. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.1

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.8.4

This plugin is prone to a cross site request forgery and cross site scripting vulnerabilities. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.7.4

This plugin is prone to xml/ajax.php full path disclosure vulnerability. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2015-1784

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

CVE-2015-1785

In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.66

The NextGen Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the is_image_file function in versions up to, and including, 2.0.65. This makes it possible for authenticated attackers with upload privileges to upload arbitrary files on the affected sites server which may make remote code execution possible.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.1

This NextGEN Gallery plugin is prone to a directory-traversal vulnerability via "jqueryFileTree.php". It fails to clean up user-supplied input. Using this plugin an attacker can obtain important information which could aid in further attacks. Upgrade the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.7

The NextGen Gallery plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 2.0 via the 'dir' parameter. This allows attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2013-3684

NextGEN Gallery plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2013-0291

This NextGEN Gallery plugin is prone to a path-disclosure vulnerability. It allows anr attacker to obtain sensitive information that may lead to further attacks. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.11

WordPress NextGEN Gallery plugin's "test-head" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credentials. Other attacks are also possible. Update the plugin.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2012-3414

The NextGen Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via swfupload.swf in versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2010-1186

This NextGEN Gallery plugin is prone to a cross-site scripting vulnerability. It is really popular plugin for the WordPress content management system, usually found as a blogging platform. The vulnerability manipulates the mode parameter of the xml/media-rss.php script and it results that unsanitized imput can be crafted into an attack by a malicious user.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2008-7175

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field for galleries in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.59.5

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled SimpleLightbox JavaScript library (version 2.1.5) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: CVE.org

CVE-2026-1463

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.3 via the 'template' parameter in gallery shortcodes. This makes it possible for authenticated attackers, with Author-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.1.7

The library, used in numerous plugins, does not have proper authorisation when updating blog options, allowing any authenticated users, such as subscriber to update arbitrary options

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 3.1.6

Legacy serialization handling allows unserialize of user input for low privileged users, leading to RCE.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.79

According to the original source, one of the following conditions must be met for exploitation: 1. The use of a NextGEN Basic TagCloud gallery. 2. If users are able to submit posts to be reviewed (contributors).

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.1.9

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Authenticated Path Traversal security vulnerability.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.0

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a gallerypath Parameter Stored XSS security vulnerability.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.7.4

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a xml/ajax.php Path Disclosure security vulnerability.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.8

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a swfupload.swf Cross-Site Scripting (XSS) security vulnerability.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.8.4

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a XXS & CSRF security vulnerability.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 1.9.1

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Multiple Cross-Site Scripting (XSS) security vulnerability.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.7

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Directory Traversal security vulnerability.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery [nextgen-gallery] < 2.0.66

The user must have upload privileges.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: WPScan

Cómo solucionarlo

Mantén Nextgen Gallery actualizado — 4.2.3 es la última versión en wordpress.org, y cada CVE de arriba indica la versión exacta que lo corrigió ("Corregido en").

Este es el historial completo de vulnerabilidades conocidas del plugin, no un escaneo de una instalación específica — ejecuta un escaneo gratis de tu propio sitio para verificar tu versión instalada exacta.

Alternativas más seguras / más establecidas

• Smart Slider 3 — 800000+ instalaciones activas — 98/100 (1123) — PHP máx. <8.0
• Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider — 500000+ instalaciones activas — 92/100 (733) — PHP máx. 8.4
• Firelight Lightbox — 200000+ instalaciones activas — 96/100 (348) — PHP máx. 8.4
• Photo Gallery by 10Web – Mobile-Friendly Image Gallery — 100000+ instalaciones activas — 90/100 (1581)
• Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel — 100000+ instalaciones activas — 96/100 (984)