CVE-2024-4670

🗓️ 15 May 2024 13:15:26Reported by [email protected]Type

The All-in-One Video Gallery plugin for WordPress v3.6.5 and below is vulnerable to Local File Inclusion via aiovg_search_form shortcode, allowing arbitrary file execution by authenticated attackers with contributor-level access

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin All-in-One Video Gallery 安全漏洞	15 May 202400:00	–	cnnvd
CVE	CVE-2024-4670	15 May 202412:46	–	cve
Cvelist	CVE-2024-4670 All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode	15 May 202412:46	–	cvelist
EUVD	EUVD-2024-44271	3 Oct 202520:07	–	euvd
Patchstack	WordPress All-in-One Video Gallery plugin <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode vulnerability	15 May 202401:55	–	patchstack
Patchstack	WordPress All-in-One Video Gallery Plugin <= 3.6.5 is vulnerable to Local File Inclusion	15 May 202400:00	–	patchstack
RedhatCVE	CVE-2024-4670	5 Feb 202500:11	–	redhatcve
Vulnrichment	CVE-2024-4670 All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode	15 May 202412:46	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 13, 2024 to May 19, 2024)	23 May 202415:00	–	wordfence
WPVulnDB	All-in-One Video Gallery < 3.7.0 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode	15 May 202400:00	–	wpvulndb

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3085217/all-in-one-video-gallery
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e2793547-5edf-4d2a-bc3b-fcaeed62963d

15 Apr 2026 00:35Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

EPSS0.00618

CWE-98