All-in-One Video Gallery vulnerabilities
We track 1 vulnerability in All-in-One Video Gallery products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
1vulnerabilities
0critical
1high
0exploited
8.0average CVSS score
Latest All-in-One Video Gallery vulnerabilities
- 8.0 High severity
All-in-One Video Gallery: Improper Neutralization of Input During Web Page Generation
The All-in-One Video Gallery WordPress plugin before 5.1.0 does not escape a video's stored thumbnail URL before outputting it in the admin video list, and does not sanitise that value when it is written outside its own editor, allowing users with a role as lo