Description
Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wpo-HR | NGG Smart Image Search | < 4.0.0 | 4.0.0 |
Critical · 9.3
CVE-2026-73185
EUVD-2026-62380GHSA-96wp-h3p4-288v
WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability
Published Aug 19, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack