PT-2026-1969 · Unknown · Nextgen Download Gallery

Published 2026-01-08 · Updated 2026-01-08 · CVE-2026-0675

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions NextGEN Download Gallery versions through 1.6.2

Description The NextGEN Download Gallery software contains a flaw that could allow unauthorized retrieval of embedded sensitive data due to an exposure of sensitive system information to an unauthorized control sphere.

Recommendations Update NextGEN Download Gallery to a version later than 1.6.2.

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2026-0675

Affected Products

Nextgen Download Gallery

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-0675 · Security Note
• https://twitter.com/VulmonFeeds/status/2009229311425892847 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/nextgen-download-gallery/vulnerability/wordpress-nextgen-download-gallery-plugin-1-6-2-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2009201083290099712 · Twitter Post
• https://t.me/CVEtracker/41705 · Telegram Post