Vulnerabilities

TI-2026-51333 CVE-2026-73185 · GHSA-96wp-h3p4-288v

WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-08-19 Fixed in 4.0.0 CWE-89

TI-2025-35879 CVE-2025-58027 · GHSA-4j69-8q5j-4h2r

WordPress NGG Smart Image Search Plugin <= 3.4.3 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allows Stored XSS.This issue affects NGG Smart Image Search: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-22 No fix listed CWE-79

TI-2025-32882 CVE-2025-52832 · GHSA-vm95-2m88-cv87

WordPress NGG Smart Image Search plugin <= 3.4.1 - SQL Injection Vulnerability

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allows SQL Injection.This issue affects NGG Smart Image Search: f…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00323 Published 2025-07-04 No fix listed CWE-89

TI-2025-30000 CVE-2025-47503 · GHSA-8cwm-c2r5-2hp9

WordPress NGG Smart Image Search plugin <= 3.3.3 - Cross Site Scripting (XSS) Vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allows Stored XSS.This issue affects NGG Smart Image Search: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00266 Published 2025-05-07 No fix listed CWE-79

TI-2024-12697 CVE-2024-13658 · GHSA-xvcx-v8p3-jwg2

NGG Smart Image Search <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting