← Vulnerability feed

Vulnerability record · CVE-2015-9538 · published 26 November 2019

CVE-2015-9538: Imagely nextgen gallery path traversal vulnerability

Imagely · Nextgen Gallery

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

6.5 CVSS 3.1 Medium EPSS 10% · top 4.5% CWE-22 · Path traversal
6.5CVSS 3.1 base score, v2 4.0
10%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References, 10 tagged exploit
17 Jun 2026Last modified by NVD

Description

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://cxsecurity.com/issue/WLB-2015080165 ExploitThird Party Advisory
https://cybersecurityworks.com/zerodays/cve-2015-9538-nextgen.html ExploitThird Party Advisory
https://github.com/cybersecurityworks/Disclosed/issues/2 ExploitThird Party Advisory
https://packetstormsecurity.com/files/135114/WordPress-NextGEN-Gallery-2.1.15-Cross-Site-Scripting-Path-Traversal.html ExploitThird Party AdvisoryVDB Entry
https://wordpress.org/plugins/nextgen-gallery/#developers Release NotesThird Party Advisory
https://www.openwall.com/lists/oss-security/2015/08/28/4 ExploitMailing ListThird Party Advisory
https://www.openwall.com/lists/oss-security/2015/09/01/7 Mailing ListThird Party Advisory
https://cxsecurity.com/issue/WLB-2015080165 ExploitThird Party Advisory
https://cybersecurityworks.com/zerodays/cve-2015-9538-nextgen.html ExploitThird Party Advisory
https://github.com/cybersecurityworks/Disclosed/issues/2 ExploitThird Party Advisory
https://packetstormsecurity.com/files/135114/WordPress-NextGEN-Gallery-2.1.15-Cross-Site-Scripting-Path-Traversal.html ExploitThird Party AdvisoryVDB Entry
https://wordpress.org/plugins/nextgen-gallery/#developers Release NotesThird Party Advisory
https://www.openwall.com/lists/oss-security/2015/08/28/4 ExploitMailing ListThird Party Advisory
https://www.openwall.com/lists/oss-security/2015/09/01/7 Mailing ListThird Party Advisory

Track CVE-2015-9538 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2013-3684Imagely nextgen gallery unrestricted file upload vulnerabilityNextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file uploadEPSS 19%9.8CVE-2019-14314Imagely nextgen gallery sql injection vulnerabilityA SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability…EPSS 43%9.8CVE-2016-10889Imagely nextgen gallery sql injection vulnerabilityThe nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name.EPSS 1.8%8.8CVE-2023-48328Imagely nextgen gallery cross-site request forgery vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery allows Cross Site Request Forgery.This issue af…EPSS 0.27%8.8CVE-2015-1784Imagely nextgen gallery unrestricted file upload vulnerabilityIn nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web applica…EPSS 2.0%8.8CVE-2020-35942Imagely nextgen gallery cross-site scripting vulnerabilityA Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusion via se…EPSS 1.4%8.8CVE-2015-9228Imagely nextgen gallery unrestricted file upload vulnerabilityIn post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a fil…EPSS 3.7%7.5CVE-2023-3154Imagely nextgen gallery vulnerabilityThe WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the `g…EPSS 0.70%

Source: NIST National Vulnerability Database (record CVE-2015-9538), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.