Nextcellent Gallery

Vendor:

First CVE: May 8, 2014 · Active for 12 years

2

Total CVEs

More Total CVEs than 53% of tracked products

1.0

Avg CVEs / Year

Bottom 1%

3.5

Avg CVSS

Higher Avg CVSS than 1% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Nextcellent Gallery over time

Volume of CVEsAvg CVSS Base Score

First CVE

May 8, 2014

12 years ago

Most Recent CVE

Jun 27, 2022

1,492 days ago

CVE Severity & Scoring

Nextcellent Gallery2 CVEs

50%

All CVEs353,173 CVEs

45%

40%

11%

LowMedium

Attack Vector

Local0 (0.0%)

Network1 (50.0%)

Unknown1 (50.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (50.0%)

High0 (0.0%)

Unknown1 (50.0%)

User Interaction

None0 (0.0%)

Unknown1 (50.0%)

Required1 (50.0%)

Privileges Required

Low0 (0.0%)

High1 (50.0%)

None0 (0.0%)

Unknown1 (50.0%)

Top CVEs

Signals from CVEs in this product scope (2 CVEs).

2 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2022-1971MEDIUM The NextCellent Gallery WordPress plugin through 1.9.35 does not sanitise and escape some of its image settings, which could allow high privilege users such as admin to perform Sto	Jun 27, 2022	4.8	19	NO	NO
CVE-2014-3123LOW Cross-site scripting (XSS) vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGE	May 8, 2014	2.1	11	NO	NO

View all 2 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (2 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (2 CVEs).

Media Mentions

Signals from CVEs in this product scope (2 CVEs).

Top CNAs Publishing CVEs For Nextcellent Gallery

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
1.9.16	1	2.1	1.6%
1.9.15	1	2.1	1.6%
1.9.14	1	2.1	1.6%