Approved changes feed: RSS · Atom

cpe:2.3:a:imagely:nextgen_gallery_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorImagely (1489f61b-f21f-508e-b60d-ac31b6ac5e8a)
ProductNextgen Gallery Plugin (ba264c94-1c47-5028-a2c6-7c3e8751e1ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6565 vulnerable 2026-06-08 05:08:02.815763 The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 may execute code from an uploaded malicious file
The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user to read arbitrary files from the server, or execute arbitrary code on the server in some circumstances (dependent on server configuration).
Published: 2018-07-13T20:00:00.000Z
Updated: 2024-08-06T01:36:28.098Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.