NextGEN Download Gallery

NextGEN Download Gallery has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).

The one issue recorded for NextGEN Download Gallery has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Nabil Irawan. NextGEN Download Gallery is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all NextGEN Download Gallery vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-0675

NextGEN Download Gallery <= 1.6.2 - Unauthenticated Information Exposure

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv1.6.2

NextGEN Download Gallery

webaware

Author

webaware

5.0(11)
100/100
Last Updated
2024-03-17 (3y ago)
Active Installs
2,000+
Downloads
104,095
Requires WP
4.0+
Requires PHP
5.6+
Tested up to
WP 6.5.10
Created
2012-07-07 (14y ago)

Add a template to NextGEN Gallery that provides multiple-file downloads for trade/media galleries. NextGEN Gallery is one of the best gallery plugins for WordPress because it is very flexible and has a nice, simple admin. This plugin adds a new gallery template that lets you select multiple images from the gallery to be downloaded as a ZIP archive. NB: the Photocrati version of NextGEN Gallery can impact the performance of your server, and not all of the old plugin’s functionality works. You might want to consider using NextCellent Gallery instead — it’s a fork of the original NextGEN Gallery with continued support and compatibility, without the performance impacts. NextGEN Download Gallery is targetted at creating “Trade/Media” areas on websites, allowing journalists to easily download multiple product images. It’s apparently very popular with photographers too. Translations Many thanks to the generous efforts of our translators: Czech (cs_CZ) — Rudolf Klusal Danish (da_DK) — Ligefrem Dutch (nl_NL) — the Dutch translation team English (en_CA) — the English (Canadian) translation team English (en_GB) — the English (British) translation team English (en_ZA) — the English (South African) translation team French (fr_FR) — Nicolas Sizun Korean (ko_KR) — the Korean translation team Portuguese (pt_BR) — Juliano Arantes Polish (pl_PL) — Jakub Molek and the Polish translation team Russian (sv_SE) — the Russian translation team Swedish (sv_SE) — the Swedish translation team Turkish (tr_TR) — the Turkish translation team If you’d like to help out by translating this plugin, please sign up for an account and dig in. Credits This program incorporates a little code that is copyright by Photocrati Media 2012 under the GPLv2. Some PHP code was copied from NextGEN Gallery and altered, so that the nggtags shortcode could be extended as nggtags_ext and specify a gallery template.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C