Plugins360 All-In-One Video Gallery
4 CVEs affecting Plugins360 All-In-One Video Gallery. Latest disclosed: 2024-07-24. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2633 | High | 7.5 | 2022-09-06 | The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found… |
CVE-2021-24970 | High | 7.2 | 2021-12-13 | The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin… |
CVE-2024-6629 | Medium | 6.4 | 2024-07-24 | The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video shortcode in all versions up to, and incl… |
CVE-2024-31248 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Team Plugins360 All-in-One Video Gallery.This issue affects All-in-One Video Gallery: from n/a through 3.5.2. |