Wpgetready maintains a narrowly focused WordPress plugin portfolio centered on the Nextcellent Gallery product, a web-based image gallery component embedded in WordPress installations. The durable signal in its vulnerability profile is the recurring web-application input-handling issue of cross-site scripting, typical of gallery and content-display plugins where user-supplied or third-party image metadata requires proper sanitization. Current severity, exploitation status, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Wpgetready over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-1971MEDIUM The NextCellent Gallery WordPress plugin through 1.9.35 does not sanitise and escape some of its image settings, which could allow high privilege users such as admin to perform Sto | Jun 27, 2022 | 4.8 | 19 | NO | NO |
Cross-site scripting (XSS) vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGE | May 8, 2014 | 2.1 | 11 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Wpgetready.
Media articles that mention a CVE ID that affects a product developed by Wpgetready — matched by CVE ID, not by vendor name.