CVE-2019-14314: Imagely NextGen Gallery

Critical severity, CVSS 9.8. EPSS: 43.4% chance of exploitation in the next 30 days.

A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php.

Affected products

• Imagely NextGen Gallery: before 3.2.10 (fixed in 3.2.10)

Published 2019-08-27. Last modified 2026-06-17.