| CVE-2026-120408 |
All-in-One Video Gallery < 5.1.0 - Subscriber+ Stored XSS via 'image' Post Meta
|
8.0
Élevée
|
6 nov. 2026 |
| CVE-2026-119259 |
All-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta Write
|
5.3
Moyenne
|
6 nov. 2026 |
| CVE-2026-118783 |
All-in-One Video Gallery < 5.0.0 - Contributor+ Stored XSS via Shortcode Attribute
|
6.8
Moyenne
|
4 nov. 2026 |
| CVE-2026-118629 |
The All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before rendering…
|
5.3
Moyenne
|
31 oct. 2026 |
| CVE-2026-19075 |
All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=` on any…
|
5.0
Moyenne
|
10 août 2026 |
| CVE-2021-24970 |
The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using…
|
Non notée
|
13 déc. 2021 |