| CVE-2026-12123 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to,…
|
6.4
Moyenne
|
10 juil. 2026 |
| CVE-2026-1706 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'vi' parameter…
|
6.1
Moyenne
|
4 mars 2026 |
| CVE-2025-15516 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
|
4.3
Moyenne
|
24 janv. 2026 |
| CVE-2025-14947 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
|
6.5
Moyenne
|
23 janv. 2026 |
| CVE-2025-12957 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and…
|
8.8
Élevée
|
16 janv. 2026 |
| CVE-2025-12966 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
|
8.8
Élevée
|
6 déc. 2025 |
| CVE-2022-4974 |
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
|
6.3
Moyenne
|
16 oct. 2024 |
| CVE-2024-6629 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video…
|
6.4
Moyenne
|
24 juil. 2024 |
| CVE-2024-4670 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and…
|
8.8
Élevée
|
15 mai 2024 |
| CVE-2024-4033 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
|
8.8
Élevée
|
2 mai 2024 |
| CVE-2022-2633 |
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side…
|
7.5
Élevée
|
6 sept. 2022 |