Sign in

4.3 Medium

CVE-2022-38468 Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery…

Description

Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin <= 3.28 leading to thumbnail alteration.

Affected products and versions

Product	Affected versions	Fixed in
WordPress Gallery Plugin – NextGEN Gallery 3.28	earliest → 3.28	No fix stated

The 2 CVEs of WordPress Gallery Plugin – NextGEN Gallery →

CVE-2023-48328 Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery allows Cross… 4.3 Medium

Do you use WordPress Gallery Plugin – NextGEN Gallery?

Track this CVE Watch WordPress Gallery Plugin – NextGEN Gallery Check my SBOMs

www.cveye.io/en/cve/CVE-2022-38468

Timeline

Published March 1, 2023
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE