AV
Product
All-in-One Video Gallery
12
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 5Low 0
Watch
Add All-in-One Video Gallery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-12957 | 8.8 | Jan 16 | All-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypass Affected: through 4.5.7 |
| CVE-2025-12966 | 8.8 | Dec 6 | All-in-One Video Gallery 4.5.4 - 4.5.7 – Authenticated (Author+) Arbitrary File Upload via Import ZIP Affected: 4.5.4 through 4.5.7 |
| CVE-2024-31248 | 8.8 | Jun 9 | WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability Affected: before 3.6.0 |
| CVE-2024-4670 | 8.8 | May 15 | All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode Affected: through 3.6.5 |
| CVE-2024-4033 | 8.8 | May 2 | All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image Affected: through 3.6.4 |
| CVE-2022-2633 | 8.2 | Sep 6 | The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the… Affected: 2.5.8 through 2.6.0 |
| CVE-2021-24970 | 7.2 | Dec 13 | All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion Affected: before 2.5.0 |
Showing 7