Security WordPress NextGEN Gallery 2.1.15 Cross Site Scripting / Path Traversal January 4, 2016 007admin WordPress NextGEN Gallery version 2.1.15 suffers from cross site scripting and path traversal vulnerabilities.