agentprime: smub-photo-gallery-sliders-proofing-and-themes-nextgen-galleryEvery new CVE for smub-photo-gallery-sliders-proofing-and-themes-nextgen-gallery.https://agentprime.io/CVE-2026-76010: Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.4.1 - Authenticated (Custom+) Remote Code Execution via XML-RPC 'meta_data' Mass Assignment and Path Traversalhttps://agentprime.io/advisories/CVE-2026-76010/https://agentprime.io/advisories/CVE-2026-76010/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 09:29:25 GMTCVECVE-2026-116563: Photo Gallery, Sliders, Proofing and Themes <= 4.5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment `title` Attribute via Shutter Lightbox innerHTMLhttps://agentprime.io/advisories/CVE-2026-116563/https://agentprime.io/advisories/CVE-2026-116563/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 05:33:06 GMTCVECVE-2026-76012: Photo Gallery, Sliders, Proofing and Themes <= 4.4.1 - Authenticated (Custom+) Local File Inclusion via Lightroom 'gallery_edit' Task property_list + Image Uploadhttps://agentprime.io/advisories/CVE-2026-76012/https://agentprime.io/advisories/CVE-2026-76012/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 17:15:33 GMTCVECVE-2026-6566: Photo Gallery, Sliders, Proofing and Themes <= 4.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Image Deletion via REST APIhttps://agentprime.io/advisories/CVE-2026-6566/https://agentprime.io/advisories/CVE-2026-6566/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 05:31:10 GMTCVECVE-2026-1463: Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusionhttps://agentprime.io/advisories/CVE-2026-1463/https://agentprime.io/advisories/CVE-2026-1463/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Mar 2026 16:26:26 GMTCVECVE-2025-13641: Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'https://agentprime.io/advisories/CVE-2025-13641/https://agentprime.io/advisories/CVE-2025-13641/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 09:21:29 GMTCVECVE-2025-2537: Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Libraryhttps://agentprime.io/advisories/CVE-2025-2537/https://agentprime.io/advisories/CVE-2025-2537/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Jul 2025 12:23:08 GMTCVECVE-2024-5878: Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Libraryhttps://agentprime.io/advisories/CVE-2024-5878/https://agentprime.io/advisories/CVE-2024-5878/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 May 2025 07:22:29 GMTCVECVE-2024-5020: Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Libraryhttps://agentprime.io/advisories/CVE-2024-5020/https://agentprime.io/advisories/CVE-2024-5020/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Dec 2024 08:22:46 GMTCVECVE-2024-3097: WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosurehttps://agentprime.io/advisories/CVE-2024-3097/https://agentprime.io/advisories/CVE-2024-3097/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:58:58 GMTCVE