CVE-2022-38468: Imagely NextGen Gallery

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin <= 3.28 leading to thumbnail alteration.

Affected products

• Imagely NextGen Gallery: before 3.29 (fixed in 3.29)

Published 2023-03-01. Last modified 2026-06-17.