CVE-2015-9538: Imagely NextGen Gallery

Medium severity, CVSS 6.5. EPSS: 10.1% chance of exploitation in the next 30 days.

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

Affected products

• Imagely NextGen Gallery: before 2.1.15 (fixed in 2.1.15)

Published 2019-11-26. Last modified 2026-06-17.