{"id":"CVE-2026-94123","published":"2026-09-30T13:17:25.000","lastModified":"2026-09-30T14:17:40.940","description":"Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/nextgen-gallery/vulnerability/wordpress-nextgen-gallery-plugin-4-5-0-arbitrary-file-download-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The NextGEN Gallery plugin allows unauthenticated users to download arbitrary files from the server by manipulating the 'download' parameter in the URL. This vulnerability could allow attackers to access sensitive files like configuration files, database credentials, or source code without needing any authentication.","exploitability":"Exploitation is straightforward with no prerequisites as anyone can trigger the file download by crafting a URL with the vulnerable parameter, making it highly suitable for automated attacks.","blast_radius":"The impact could be significant as attackers might gain access to sensitive application files, configuration data, and potentially database credentials, leading to further compromise of the WordPress site.","remediation":"Upgrade to NextGEN Gallery version 4.5.1 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["file-download","unauthenticated","wordpress","plugin"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:05:38.921Z"}}