Security WordPress NextGEN Gallery 2.1.15 Cross Site Scripting / Path Traversal January 4, 2016 007admin Leave a comment WordPress NextGEN Gallery version 2.1.15 suffers from cross site scripting and path traversal vulnerabilities.