| CVE-2026-120408 |
All-in-One Video Gallery < 5.1.0 - Subscriber+ Stored XSS via 'image' Post Meta
|
8.0
High
|
Nov 6, 2026 |
| CVE-2026-119259 |
All-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta Write
|
5.3
Medium
|
Nov 6, 2026 |
| CVE-2026-118783 |
All-in-One Video Gallery < 5.0.0 - Contributor+ Stored XSS via Shortcode Attribute
|
6.8
Medium
|
Nov 4, 2026 |
| CVE-2026-118629 |
The All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before rendering…
|
5.3
Medium
|
Oct 31, 2026 |
| CVE-2026-19075 |
All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=` on any…
|
5.0
Medium
|
Aug 10, 2026 |
| CVE-2021-24970 |
The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using…
|
Not rated
|
Dec 13, 2021 |