CRITICAL 9.3 CVE-2026-73185 Published 19 Aug 2026

NGG Smart Image Search SQL Injection

Worried this affects one of your servers?

Unauthenticated SQL Injection vulnerability exists in NGG Smart Image Search versions prior to 4.0.0.

NGG Smart Image Search is a WordPress plugin used for image search functionality.

Exploiting this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to data theft or manipulation.