[■] Plugin de WordPress

All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

25 expedientes en el radar

Comprueba tu versión de All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos Sólo las que se están explotando

[■] Registro

Vulnerabilidades (25)

6,4 Media

CVE-2026-120838: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-120838

T−7d 7 nov. 2026
5,3 Media

CVE-2026-120409: exposición de información sensible en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-120409

T−8d 6 nov. 2026
6,4 Media

CVE-2026-116545: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-116545

T−8d 5 nov. 2026
6,4 Media

CVE-2026-118783: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-118783

T−10d 4 nov. 2026
6,4 Media

CVE-2026-120408: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-120408

T−11d 3 nov. 2026
5,3 Media

CVE-2026-119259: falta de autorización en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-119259

T−11d 3 nov. 2026
5,3 Media

CVE-2026-118629: exposición de información sensible en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-118629

T−16d 29 oct. 2026
6,4 Media

CVE-2026-109209: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-109209

T−18d 27 oct. 2026
6,4 Media

CVE-2026-109974: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-109974

T−18d 27 oct. 2026
6,4 Media

CVE-2026-114693: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-114693

T−23d 22 oct. 2026
6,4 Media

CVE-2026-19075: falsificación de peticiones del servidor (SSRF) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-19075

T−99d 7 ago. 2026
6,4 Media

CVE-2026-12123: falsificación de peticiones del servidor (SSRF) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-12123

T−128d 9 jul. 2026
6,1 Media

CVE-2026-1706: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2026-1706

T−255d 3 mar. 2026
4,3 Media

CVE-2025-15516: falta de autorización en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2025-15516

T−294d 23 ene. 2026
6,5 Media

CVE-2025-14947: falta de autorización en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2025-14947

T−296d 22 ene. 2026
8,8 Alta

CVE-2025-12957: subida de ficheros peligrosos en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2025-12957

T−303d 15 ene. 2026
8,8 Alta

CVE-2025-12966: subida de ficheros peligrosos en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2025-12966

T−343d 5 dic. 2025
6,4 Media

CVE-2024-6629: cross-site scripting (XSS) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2024-6629

T−844d 23 jul. 2024
8,8 Alta

CVE-2024-4670: inclusión de ficheros en PHP en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2024-4670

T−914d 14 may. 2024
8,8 Alta

CVE-2024-4033: subida de ficheros peligrosos en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2024-4033

T−927d 1 may. 2024
4,3 Media

CVE-2024-31248: falta de autorización en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2024-31248

T−953d 5 abr. 2024
6,1 Media

CVE-2023-33999: cross-site scripting (XSS) en Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily y otras 757 tecnologías

CVE-2023-33999

T−1215d 18 jul. 2023
7,5 Alta

CVE-2022-2633: recorrido de rutas (path traversal) en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2022-2633

T−1550d 17 ago. 2022
6,3 Media

CVE-2022-4974: falta de autorización en Da Reactions y otras 619 tecnologías

CVE-2022-4974

T−1716d 4 mar. 2022
7,2 Alta

CVE-2021-24970: inclusión de ficheros en PHP en All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos

CVE-2021-24970

T−1825d 15 nov. 2021