Description
Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Syed Balkhi | NextGEN Gallery | ≤ 4.5.0 | — |
High · 7.5
CVE-2026-94123
EUVD-2026-89840GHSA-j35h-prj2-f2v7
WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack