CVE-2025-14947

creationtimestamp| type| source ---|---|--- 2026-01-23 20:38:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4kmau42g2h...

CVE-2025-14947 All-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion

The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcallbackcreatebunnystreamvideo, ajaxcallbackgetbunnystreamvideo, and ajaxcallbackdeletebunnystreamvideo functions in all versions up to, and including,...