Skip to content

CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-73185

WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-08-19
Updated: 2026-08-20
Assigning organization: Patchstack

Description

Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

wpo-HR NGG Smart Image Search

Default version status: unaffected

n/a to < 4.0.0affected

References

https://patchstack.com/database/wordpress/plugin/ngg-smart-image-search/vulnerability/wordpress-ngg-smart-image-search-plugin-4-0-0-sql-injection-vulnerability?_s_id=cve ↗