wpo-HR vulnerabilities

🔔 Create alert RSS

Published CVEs affecting wpo-HR products: 2 record(s), with severity, exploitation and fixes.

NGG Smart Image Search 2

Exploited only (KEV) →

CVE-2026-73185 Critical · 9.3 CWE-89 Aug 19, 2026

WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.

CVE-2025-58027 Medium · 6.5 CWE-79 Sep 22, 2025

WordPress NGG Smart Image Search Plugin <= 3.4.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpo-HR NGG Smart Image Search ngg-smart-image-search allows Stored XSS.This issue affects NGG Smart Image Search: from n/a through <= 3.4.3.