Medium · 4.3 CVE-2022-38468 EUVD-2022-41051GHSA-4rcg-xhqc-237v

WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)

Published Mar 1, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin <= 3.28 leading to thumbnail alteration.

Vendor	Product	Affected	Fixed
Imagely	WordPress Gallery Plugin – NextGEN Gallery	≤ 3.28	—