NGG Smart Image Search

NGG Smart Image Search has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (60%). Other recurring categories include SQL Injection.

Every one of the 5 issues recorded for NGG Smart Image Search has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, one record each. NGG Smart Image Search is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all NGG Smart Image Search vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2026-73185

NGG Smart Image Search < 4.0.0 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

5 records


2026-08-19 00:00	NGG Smart Image Search < 4.0.0 - Unauthenticated SQL Injection NGG Smart Image Search < 4.0.0	`CVE-2026-73185`	7.5 High	Jarno Vos	Yes
2025-09-22 00:00	NGG Smart Image Search <= 3.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting NGG Smart Image Search <= 3.4.3	`CVE-2025-58027`	6.4 Medium	Prissy	Yes
2025-07-01 00:00	NGG Smart Image Search <= 3.4.1 - Unauthenticated SQL Injection NGG Smart Image Search <= 3.4.1	`CVE-2025-52832`	7.5 High	ch4r0n	Yes
2025-05-07 00:00	NGG Smart Image Search <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting NGG Smart Image Search <= 3.3.3	`CVE-2025-47503`	6.4 Medium	Muhammad Yudha - DJ	Yes
2025-02-11 00:00	NGG Smart Image Search <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting NGG Smart Image Search <= 3.2.1	`CVE-2024-13658`	6.4 Medium	Peter Thaleikis	Yes

Showing 1–5 of 5 reports

Latestv4.0.1

NGG Smart Image Search

Author

wpo-HR

4.9(13)

98/100

Last Updated

2026-08-17 (27d ago)

Active Installs

400+

Downloads

12,689

Requires WP

6.3+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2016-10-17 (10y ago)

NGG Smart Image Search provides smart search and display functionalities for images in NextGEN galleries. It requires NextGEN Gallery to be installed and activated. Version 4 is a highly recommended functional and security update. It is a complete revision introducing Gutenberg blocks, new display modes, improved documentation and many optimizations. Previous documentation pages remain valid unless updated. More information and examples: Homepage for Plugin NGG Smart Image Search Searches can be performed across title, description, filename and tags. Two search modes are available: basic (OR) and extended (AND). Search results can be displayed in various layouts: linked image lists with meta data advanced thumbnail lists advanced mosaic layouts single image inspection fancybox v6 lightbox with EXIF display paging, sorting, limiting native NextGEN / Pro / Plus galleries Search input can be provided via: Gutenberg block URL parameter legacy shortcode legacy widget Extended documentation: https://r-fotos.de/wordpress-plugins/nextgen-galleries-smart-image-search/new-functionalities-v4/

View on WordPress.org