Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in webaware NextGEN Download Gallery nextgen-download-gallery allows Retrieve Embedded Sensitive Data.This issue affects NextGEN Download Gallery: from n/a through <= 1.6.2.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 08 Jan 2026 09:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in webaware NextGEN Download Gallery nextgen-download-gallery allows Retrieve Embedded Sensitive Data.This issue affects NextGEN Download Gallery: from n/a through <= 1.6.2. | |
| Title | WordPress NextGEN Download Gallery plugin <= 1.6.2 - Sensitive Data Exposure vulnerability | |
| Weaknesses | CWE-497 | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Patchstack
Published:
Updated: 2026-01-08T09:17:55.328Z
Reserved: 2026-01-07T17:39:26.850Z
Link: CVE-2026-0675
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-01-08T10:15:55.043
Modified: 2026-01-08T18:08:18.457
Link: CVE-2026-0675
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses