Vulnerabilities > Imagely > Nextgen Gallery > Critical

DATE CVE VULNERABILITY TITLE RISK
2020-02-11 CVE-2013-3684 Unrestricted Upload of File with Dangerous Type vulnerability in Imagely Nextgen Gallery
NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload
network
low complexity
imagely CWE-434
critical
9.8
2019-08-27 CVE-2019-14314 SQL Injection vulnerability in Imagely Nextgen Gallery
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress.
network
low complexity
imagely CWE-89
critical
9.8
2019-08-14 CVE-2016-10889 SQL Injection vulnerability in Imagely Nextgen Gallery
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.
network
low complexity
imagely CWE-89
critical
9.8