NextGEN Gallery Search
NextGEN Gallery Search has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for NextGEN Gallery Search has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Skalucy. NextGEN Gallery Search is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.2.39.
CVE-2025-53224NextGEN Gallery Search <= 2.12 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
NextGEN Gallery Search
Author
Koen Schuit
NextGEN Gallery – Search Galleries NextGEN Gallery – Search Galleries adds a search option to the existing NextGEN Gallery menu. With this search option you can quickly and easily search through your galleries so you don’t have to go through a whole listst of galleries. The output of the search will show in a table similar to the manage galleries page and will provide a link to that gallery. NextGEN Gallery – Search Galleries even adds an option to search in the description which can be helpfull if you don’t remember the name. And NextGEN Gallery – Search Galleries also has the ability to search for part of the name or description. For instance: int will find internet, but also winter, ballpoint, saints etc. Please note: this plugin requires NextGEN Gallery installed. Key features: Find galleries easily! Search for name or description. Outputs a link to the gallery.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C