Advisories · Technology

wpo-HR NGG Smart Image Search.

Every CVE that names wpo-HR NGG Smart Image Search among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-73185 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability
- wpo-HR NGG Smart Image Search
- SQL injection
Not analysed yet 19 Aug 2026
CVE-2025-58027 CVE record

CVSS 6.5 Medium

WordPress NGG Smart Image Search Plugin <= 3.4.3 - Cross Site Scripting (XSS) Vulnerability
- wpo-HR NGG Smart Image Search
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2025
CVE-2025-52832 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress NGG Smart Image Search plugin <= 3.4.1 - SQL Injection Vulnerability
- wpo-HR NGG Smart Image Search
- SQL injection
Not analysed yet 4 Jul 2025
CVE-2025-47503 CVE record

CVSS 6.5 Medium

WordPress NGG Smart Image Search plugin <= 3.3.3 - Cross Site Scripting (XSS) Vulnerability
- wpo-HR NGG Smart Image Search
- Cross-site scripting (XSS)
Not analysed yet 7 May 2025
CVE-2024-13658 CVE record

CVSS 6.4 Medium

NGG Smart Image Search <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- wpo-hr NGG Smart Image Search
- Cross-site scripting (XSS)
Not analysed yet 12 Feb 2025