| CVE-2026-12123 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to,…
|
6.4
Medium
|
Jul 10, 2026 |
| CVE-2026-1706 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter…
|
6.1
Medium
|
Mar 4, 2026 |
| CVE-2025-15516 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
|
4.3
Medium
|
Jan 24, 2026 |
| CVE-2025-14947 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
|
6.5
Medium
|
Jan 23, 2026 |
| CVE-2025-12957 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and…
|
8.8
High
|
Jan 16, 2026 |
| CVE-2025-12966 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
|
8.8
High
|
Dec 6, 2025 |
| CVE-2022-4974 |
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
|
6.3
Medium
|
Oct 16, 2024 |
| CVE-2024-6629 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video…
|
6.4
Medium
|
Jul 24, 2024 |
| CVE-2024-4670 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and…
|
8.8
High
|
May 15, 2024 |
| CVE-2024-4033 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
|
8.8
High
|
May 2, 2024 |
| CVE-2022-2633 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side…
|
7.5
High
|
Sep 6, 2022 |