Known vulnerabilities in Syed Balkhi NextGEN Gallery
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-94123 | Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions | 7.5 High | Sep 30, 2026 |
| CVE-2026-28141 | Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions | 7.1 High | Aug 6, 2026 |
Other Syed Balkhi products
Charitable 5
All In One SEO Pack 4
aThemes Addons for Elementor 4
Contact Form by WPForms 4
Easy Digital Downloads 4
User Feedback 4
Beacon Lead Magnets and Lead Capture 2
Giveaways and Contests by RafflePress 2
WPForms 1
AffiliateWP – External Referral Links 1
WP Lightbox 2 1
Table of Contents Plus 1