CVE-2026-94123

Summary

The NextGEN Gallery plugin allows unauthenticated users to download arbitrary files from the server by manipulating the 'download' parameter in the URL. This vulnerability could allow attackers to access sensitive files like configuration files, database credentials, or source code without needing any authentication.

Exploitability

Exploitation is straightforward with no prerequisites as anyone can trigger the file download by crafting a URL with the vulnerable parameter, making it highly suitable for automated attacks.

Blast radius

The impact could be significant as attackers might gain access to sensitive application files, configuration data, and potentially database credentials, leading to further compromise of the WordPress site.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to NextGEN Gallery version 4.5.1 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.