Known vulnerabilities in WordPress Gallery Plugin - NextGEN Gallery

Vendor: Imagely
Software CPE: cpe:2.3:a:imagely:nextgen-gallery:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WordPress Gallery Plugin - NextGEN Gallery WordPress Gallery Plugin - NextGEN Gallery is affected by 16 known vulnerabilities: 6 high, 8 medium, 2 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48944 - Memory corruption
CVE-2020-29361
CWE-119 Medium
No
No
- 14.12.2020 SB2020121401
SB2020121402
SB2020121422
and 22 more
#VU48945 - Memory corruption
CVE-2020-29362
CWE-119 Medium
No
No
- 14.12.2020 SB2020121401
SB2020121402
SB2020121423
and 21 more
#VU48946 - Memory corruption
CVE-2020-29363
CWE-119 Medium
No
No
- 14.12.2020 SB2020121401
SB2020121402
SB2020121424
and 17 more
#VU29016 - Memory corruption
CVE-2020-12723
CWE-119 Medium
No
No
- 15.06.2020 SB2020061513
SB2020061514
SB2020062302
and 33 more
#VU29015 - Integer overflow
CVE-2020-10878
CWE-190 High
No
No
- 15.06.2020 SB2020061513
SB2020061514
SB2020062302
and 49 more
#VU29014 - Integer overflow
CVE-2020-10543
CWE-190 High
No
No
- 15.06.2020 SB2020061513
SB2020061514
SB2020062302
and 36 more
#VU20435 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-14314
CWE-89 High
No
No
3.2.10 28.08.2019 SB2019082814
#VU19902 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
1.8.4 02.08.2019 SB2014080206
#VU19895 - Unrestricted Upload of File with Dangerous Type
CWE-434 High
No
No
2.0.66 02.08.2019 SB2014052001
#VU19886 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.0.0 02.08.2019 SB2015020801
#VU19768 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
2.1.79 02.08.2019 SB2017022703
#VU19671 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1000172
CWE-79 Low
No
No
2.2.45 02.08.2019 SB2018021422
#VU19591 - Memory corruption
CVE-2019-1010238
CWE-119 High
No
No
2.1.56 31.07.2019 SB2019073105
SB2019073106
SB2019081201
and 8 more
#VU33038 - Improper input validation
CVE-2018-18898
CWE-20 Medium
No
No
- 21.03.2019 SB2019061824
SB2020091739
SB2019013145
and 1 more
#VU33726 - Improper input validation
CVE-2018-12558
CWE-20 Medium
No
No
0.92 20.06.2018 SB2019040233
SB2019060531
SB2019050664
#VU5907 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
- 02.03.2017 SB2017030201