Skip to contentPlugins360 All-in-one Video Gallery vulnerabilities
- plugins360 all-in-one video galleryWordPress All-in-One Video Gallery plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1208386.5 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery < 5.1.1 - Unauthenticated Password-Protected Video Disclosure via Player Page and Download HandlerCVE-2026-1204095.3 Medium
- plugins360 all-in-one video gallery – video player & galleries for youtube, vimeo & self-hosted videosAll-in-One Video Gallery <= 5.0.0 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via 'track' Post Meta 'label' FieldCVE-2026-1165456.4 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery < 5.1.0 - Subscriber+ Stored XSS via 'image' Post MetaCVE-2026-1204088.0 High
- plugins360 all-in-one video galleryAll-in-One Video Gallery < 5.1.0 - Unauthenticated Views and Duration Post Meta WriteCVE-2026-1192595.3 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery < 5.0.0 - Contributor+ Stored XSS via Shortcode AttributeCVE-2026-1187836.8 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery < 5.0.0 - Unauthenticated Private and Draft Video DisclosureCVE-2026-1186295.3 Medium
- plugins360 all-in-one video gallery – video player & galleries for youtube, vimeo & self-hosted videosAll-in-One Video Gallery <= 4.9.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'embedcode' Post Meta via XML-RPCCVE-2026-1092096.4 Medium
- plugins360 all-in-one video gallery – video player & galleries for youtube, vimeo & self-hosted videosAll-in-One Video Gallery <= 4.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more_link' Shortcode AttributeCVE-2026-1099746.4 Medium
- plugins360 all-in-one video galleryWordPress All-in-One Video Gallery plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1146936.5 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' ParameterCVE-2026-190755.0 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 4.8.5 - Authenticated (Subscriber+) Server-Side Request Forgery via 'vdl' ParameterCVE-2026-121236.4 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 4.7.1 - Reflected Cross-Site Scripting via 'vi' ParameterCVE-2026-17066.1 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery 4.1.0 - 4.6.4 - Missing Authorization to Authenticated (Subscriber+) Limited User Meta UpdateCVE-2025-155164.3 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/DeletionCVE-2025-149476.5 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload BypassCVE-2025-129578.8 High
- plugins360 all-in-one video galleryAll-in-One Video Gallery 4.5.4 - 4.5.7 – Authenticated (Author+) Arbitrary File Upload via Import ZIPCVE-2025-129668.8 High
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video ShortcodeCVE-2024-66296.4 Medium
- plugins360 all-in-one video galleryWordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerabilityCVE-2024-312484.3 Medium
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form ShortcodeCVE-2024-46708.8 High
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured imageCVE-2024-40338.8 High
- plugins360 all-in-one video galleryThe All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and...CVE-2022-2633EPSS 35.7%7.5 High
- plugins360 all-in-one video galleryAll-In-One-Gallery < 2.5.0 - Admin+ Local File InclusionCVE-2021-249707.2 High