Video Gallery – YouTube Gallery, Playlist & Video Grid vulnerabilities

Product

Video Gallery – YouTube Gallery, Playlist & Video Grid

by emarket-design · last CVE Aug 16, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Video Gallery – YouTube Gallery, Playlist & Video Grid to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-12923	7.5	1%	Jul 1	Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter Affected: through 4.0.3
CVE-2026-15790	6.4	0%	Aug 16	Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode Affected: through 4.0.4