Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

plugins360 — Vulnerabilities & Security Advisories 10

Browse all 10 CVE security advisories affecting plugins360. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Plugins360 develops WordPress plugins for enhancing website functionality, with a core use case of extending site capabilities through various add-ons. Historically, the plugins have been susceptible to multiple security vulnerabilities, including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation, contributing to their 9 recorded CVEs. These issues often stem from insufficient input validation and improper access controls. While no major public security incidents have been widely documented, the consistent presence of vulnerabilities in their products indicates a pattern of security shortcomings that administrators should address promptly through updates or replacement.

Found 10 results / 10 Clear Filters
Top products by plugins360: All-in-One Video Gallery
CVE ID Title CVSS Severity Published
CVE-2026-12123 All-in-One Video Gallery <= 4.8.5 - Authenticated (Subscriber+) Server-Side Request Forgery via 'vdl' Parameter — All-in-One Video Gallery CWE-918 6.4 Medium 2026-07-10
CVE-2026-1706 All-in-One Video Gallery <= 4.7.1 - Reflected Cross-Site Scripting via 'vi' Parameter — All-in-One Video Gallery CWE-79 6.1 Medium 2026-03-04
CVE-2025-15516 All-in-One Video Gallery 4.1.0 - 4.6.4 - Missing Authorization to Authenticated (Subscriber+) Limited User Meta Update — All-in-One Video Gallery CWE-862 4.3 Medium 2026-01-24
CVE-2025-14947 All-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion — All-in-One Video Gallery CWE-862 6.5 Medium 2026-01-23
CVE-2025-12957 All-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypass — All-in-One Video Gallery CWE-434 8.8 High 2026-01-16
CVE-2025-12966 All-in-One Video Gallery 4.5.4 - 4.5.7 – Authenticated (Author+) Arbitrary File Upload via Import ZIP — All-in-One Video Gallery CWE-434 8.8 High 2025-12-06
CVE-2024-6629 All-in-One Video Gallery <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode — All-in-One Video Gallery CWE-79 6.4 Medium 2024-07-24
CVE-2024-4670 All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode — All-in-One Video Gallery CWE-98 8.8 High 2024-05-15
CVE-2024-4033 All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image — All-in-One Video Gallery CWE-434 8.8 High 2024-05-02
CVE-2022-2633 WordPress plugin All-in-One Video Gallery 安全漏洞 — All-in-One Video Gallery 7.5 High 2022-09-06

This page lists every published CVE security advisory associated with plugins360. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.