617 matches found
WordPress All-in-One Video Gallery Plugin <= 3.6.5 is vulnerable to Local File Inclusion
Software All-in-One Video Gallery Type Plugin Vulnerable versions = 3.6.5 Fixed in 3.7.0 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-4670 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 402ad478bb5f Credits Ngô Thiên An ancorn Required...
WordPress plugin All-in-One Video Gallery 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in t...
Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery < 1.5.4 - Missing Authorization
Description The Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajaxvideogallery function in versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, wi...
CVE-2024-34377
Missing Authorization vulnerability in A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery.This issue affects Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery: from n/a through 1.5.3...
CVE-2024-34377 WordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin <= 1.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery.This issue affects Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery: from n/a through 1.5.3...
CVE-2024-34377
CVE-2024-34377 affects Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugins (WordPress). Vulnerability class: Missing Authorization leading to unauthorized access to gallery resources. Affected versions: up to 1.5.3. The CVE entry is corroborated by Red Hat/Wordfence sources in th...
CVE-2024-34377 WordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin <= 1.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in A WP Life Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery.This issue affects Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery: from n/a through 1.5.3...
WordPress plugin Video Gallery 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Video Gallery - Api...
PT-2024-25836 · Unknown · Video Gallery – Api Gallery
Name of the Vulnerable Software and Affected Versions: Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery versions 1.5.3 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the Video Gallery – Api Gallery, YouTube and Vimeo,...
WordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery plugin <= 1.5.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery versions = 1.5.3...
WordPress Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery Plugin <= 1.5.3 is vulnerable to Broken Access Control
Software Video Gallery – Api Gallery, YouTube and Vimeo, Link Gallery Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34377 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...
PT-2024-28809 · WordPress · All-In-One Video Gallery
Name of the Vulnerable Software and Affected Versions: All-in-One Video Gallery plugin for WordPress versions up to, and including, 3.6.4 Description: The issue is related to missing file type validation in the aiovg create attachment from external image url function. This allows authenticated...
WordPress plugin All-in-One Video Gallery 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in t...
WordPress All-in-One Video Gallery plugin <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image vulnerability
Authenticated Contributor+ Arbitrary File Upload via featured image vulnerability discovered by stealthcopter in WordPress Plugin All-in-One Video Gallery versions = 3.6.4...
WordPress All-in-One Video Gallery Plugin <= 3.6.4 is vulnerable to Arbitrary File Upload
Software All-in-One Video Gallery Type Plugin Vulnerable versions = 3.6.4 Fixed in 3.6.5 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-4033 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID cfa484cd1cd9 Credits stealthcopter Required...
WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by emad Patchstack Alliance in WordPress Plugin All-in-One Video Gallery versions = 3.5.2...
WordPress All-in-One Video Gallery Plugin <= 3.5.2 is vulnerable to Broken Access Control
Software All-in-One Video Gallery Type Plugin Vulnerable versions = 3.5.2 Fixed in 3.6.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31248 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ff87f08708c9 Credits emad Required...
WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Responsive Image Gallery, Gallery Album versions = 2.0.3...
CVE-2024-0825 Vimeography: Vimeo Video Gallery WordPress Plugin <= 2.3.2 - Authenticated (Contributor+) PHP Object Injection
The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.2 via deserialization of untrusted input via the vimeographyduplicategalleryserialized in the duplicategallery function. This makes it possibl...