Skip to content
OpenAdvisories

Vendor

48hmorris

1 known vulnerabilities.

Products

Assistant for NextGEN Gallery 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-7641

    Assistant for NextGEN Gallery <= 1.0.9 - Unauthenticated Arbitrary Directory Deletion

    The Assistant for NextGEN Gallery plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation in the /wp-json/nextgenassistant/v1.0.0/control REST endpoint in all versions up to, and including, 1.0.9. This makes…

    48hmorris Assistant for NextGEN Gallery Web / CMS