Advisories · Technology

Photo Gallery, Sliders, Proofing and Themes.

Every CVE that names Photo Gallery, Sliders, Proofing and Themes among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81654 CVE record

CVSS 3.1 Low

NextGEN Gallery < 4.5.0 - Authenticated Plugin Image Settings Update
- Photo Gallery, Sliders, Proofing and Themes
- Broken access control
Not analysed yet 20 Sept 2026
CVE-2026-81653 CVE record

CVSS 4.2 Medium

NextGEN Gallery < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion via IDOR
- Photo Gallery, Sliders, Proofing and Themes
- Broken access control
Not analysed yet 20 Sept 2026
CVE-2026-81652 CVE record

CVSS 2.7 Low

NextGEN Gallery < 4.5.0 - Contributor+ Image Metadata Disclosure via IDOR
- Photo Gallery, Sliders, Proofing and Themes
- Broken access control
Not analysed yet 20 Sept 2026
CVE-2026-81651 CVE record

CVSS 3.1 Low

NextGEN Gallery < 4.5.0 - Authenticated Cross-Gallery Settings Modification via IDOR
- Photo Gallery, Sliders, Proofing and Themes
- Broken access control
Not analysed yet 20 Sept 2026
CVE-2026-81650 CVE record

CVSS 7.2 High

NextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP Import
- Photo Gallery, Sliders, Proofing and Themes
- Unrestricted file upload
Not analysed yet 20 Sept 2026
CVE-2024-10545 CVE record

CVSS 3.5 Low

NextGEN Gallery < 3.59.9 - Admin+ Stored XSS
- Photo Gallery, Sliders, Proofing and Themes
Not analysed yet 25 Feb 2025
CVE-2024-6393 CVE record

CVSS 4.8 Medium

NextGEN Gallery < 3.59.5 - Admin+ Stored XSS
- Photo Gallery, Sliders, Proofing and Themes
Not analysed yet 25 Nov 2024
CVE-2024-5442 CVE record

CVSS 5.9 Medium

NextGEN Gallery < 3.59.3 - Admin+ Stored XSS
- Photo Gallery, Sliders, Proofing and Themes
Not analysed yet 13 Jul 2024