Vulnerabilities / All-in-One Video Gallery
All-in-One Video Gallery vulnerabilities
Advisories WPSec published for All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos. Other sources may list more. Its attack surface: All-in-One Video Gallery on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-11 | WPSEC-2026-0760 | All-in-One Video Gallery <= 4.9.5 - Authenticated (Subscriber+) Server-Side Request Forgery via Featured Image Download | Medium 6.4 | 4.9.7 |
| 2026-10-11 | WPSEC-2026-0759 | All-in-One Video Gallery <= 4.9.5 - Unauthenticated Pricing Page Configuration Injection | Medium 4.3 | 4.9.7 |
License: CC BY 4.0