CVE-2026-0675

UNKNOWN

WordPress NextGEN Download Gallery plugin <= 1.6.2 - Sensitive Data Exposure vulnerability

Published Jan 8, 2026

Modified 1 weeks ago

No fix available

Details

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in webaware NextGEN Download Gallery nextgen-download-gallery allows Retrieve Embedded Sensitive Data.This issue affects NextGEN Download Gallery: from n/a through <= 1.6.2.

References

WEBhttps://vdp.patchstack.com/database/Wordpress/Plugin/nextgen-download-gallery/vulnerability/wordpress-nextgen-download-gallery-plugin-1-6-2-sensitive-data-exposure-vulnerability?_s_id=cve ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2026-0675

Weakness Type (CWE)

Other

CWE-497

Ecosystems

Timeline

PublishedJan 8, 2026

ModifiedJan 8, 2026