CVE-2013-0291

HIGH

NextGEN Gallery Plugin for WordPress 1.9.10-1.9.11 - Path Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-0291. PoCs published by Henrique Montenegro.

AI-analyzed exploit summary The provided text describes a path-disclosure vulnerability in the NextGEN Gallery WordPress plugin. It includes example URLs that can be used to exploit the issue, leading to sensitive information disclosure.

Description

NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability

Exploits (1)

exploitdb WRITEUP VERIFIED
by Henrique Montenegro · textwebappsphp
https://www.exploit-db.com/exploits/38314

The provided text describes a path-disclosure vulnerability in the NextGEN Gallery WordPress plugin. It includes example URLs that can be used to exploit the issue, leading to sensitive information disclosure.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: NextGEN Gallery plugin for WordPress versions 1.9.10 and 1.9.11
No auth needed
Prerequisites: Access to the target WordPress site with the vulnerable plugin installed
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry x_refsource_misc
http://www.securityfocus.com/bid/57957
Exploit, Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2013/02/15/3

Scores

CVSS v3 7.5
EPSS 0.1562
EPSS Percentile 96.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
imagely/nextgen_gallery 1.9.10
imagely/nextgen_gallery 1.9.11
Published Jan 30, 2020
Tracked Since Feb 18, 2026