All 2 CVE vulnerabilities found in All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos, with AI-generated Chinese analysis, references, and POCs.
Vendor: plugins360
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-109209 | All-in-One Video Gallery <= 4.9.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'embedcode' Post Meta via XML-RPC CWE-79 | 6.4 | Medium | 2026-10-28 |
| CVE-2026-109974 | All-in-One Video Gallery <= 4.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more_link' Shortcode Attribute CWE-79 | 6.4 | Medium | 2026-10-28 |
All 2 known CVE vulnerabilities affecting All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos with full Chinese analysis, references, and POCs where available.