617 matches found
WordPress plugin Video Gallery 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2022-47603
Unauth. Reflected Cross-Site Scripting XSS vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin = 2.0.1 versions...
WordPress Plugin Gallery – Image and Video Gallery with Thumbnails 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Video Gallery < 1.7.7 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress Video Gallery – YouTube Gallery Plugin <= 1.7.6 is vulnerable to Broken Access Control
Software Video Gallery – YouTube Gallery Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25988 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 1684686ddd67 Credits István Márt...
WordPress Video Gallery – YouTube Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)
Software Video Gallery – YouTube Gallery Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25979 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bf4c411df4a1 Credits yuyudhn...
CVE-2022-2633
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the /public/video.php file in versions up to, and including 2.6.0. This makes it possible for unauthenticated users to download sensiti...
CVE-2022-2633
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the /public/video.php file in versions up to, and including 2.6.0. This makes it possible for unauthenticated users to download sensiti...
Server side request forgery (ssrf)
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the /public/video.php file in versions up to, and including 2.6.0. This makes it possible for unauthenticated users to download sensiti...
CVE-2022-2633
CVE-2022-2633 affects the WordPress All-In-One Video Gallery plugin (versions up to 2.6.0). The root cause is improper handling of the dl parameter in ~/public/video.php, enabling unauthenticated arbitrary file downloads and server-side request forgery (SSRF). Impact is unauthenticated access to ...
CVE-2022-2633
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the /public/video.php file in versions up to, and including 2.6.0. This makes it possible for unauthenticated users to download sensiti...
PT-2022-17789 · WordPress · All-In-One Video Gallery
Name of the Vulnerable Software and Affected Versions: All-in-One Video Gallery plugin for WordPress versions up to, and including 2.6.0 Description: The issue allows unauthenticated users to download sensitive files hosted on the affected server and forge requests to the server via the dl...
WordPress plugin All-in-One Video Gallery 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
The vulnerability of the Video Gallery plugin of the WordPress content management system allows attackers to bypass existing security restrictions.
The vulnerability of the Video Gallery plugin in the WordPress content management system is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
CVE-2022-35726
Broken Authentication vulnerability in yotuwp Video Gallery plugin = 1.3.4.5 at WordPress...
CVE-2022-35726 WordPress Video Gallery plugin <= 1.3.4.5 - Broken Authentication vulnerability
Broken Authentication vulnerability in yotuwp Video Gallery plugin = 1.3.4.5 at WordPress...
CVE-2022-35726
The CVE-2022-35726 entry concerns the yotuwp Video Gallery WordPress plugin, affected versions 1.3.4.5 and earlier, with a Broken Authentication vulnerability. Technical details across connected sources confirm the vulnerability lies in the plugin’s authentication mechanism, enabling unauthorized...
CVE-2022-35726 WordPress Video Gallery plugin <= 1.3.4.5 - Broken Authentication vulnerability
Broken Authentication vulnerability in yotuwp Video Gallery plugin = 1.3.4.5 at WordPress...
WordPress plugin Video Gallery 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An authorization issue vulnerability exists...
PT-2022-4433 · WordPress · Yotuwp Video Gallery
Name of the Vulnerable Software and Affected Versions: yotuwp Video Gallery plugin versions 1.3.4.5 and earlier Description: The issue is related to a Broken Authentication vulnerability in the yotuwp Video Gallery plugin for WordPress. This vulnerability is associated with weaknesses in the...