CVE-2023-25477

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Yotuwp Video Gallery plugin = 1.3.12 versions...

CVE-2023-25477

CVE-2023-25477 is a stored XSS in the WordPress plugin Yotuwp Video Gallery (versions

CVE-2022-35726

The CVE-2022-35726 entry concerns the yotuwp Video Gallery WordPress plugin, affected versions 1.3.4.5 and earlier, with a Broken Authentication vulnerability. Technical details across connected sources confirm the vulnerability lies in the plugin’s authentication mechanism, enabling unauthorized...