Syed Balkhi NextGEN Gallery

• CVE-2026-94123 High 7.5 WordPress NextGEN Gallery plugin <= 4.5.0 - Arbitrary File Download vulnerability 0.4%
• CVE-2026-28141 High 7.1 WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability 0.5%