Advisories · Technology

All-in-One Video Gallery.

Every CVE that names All-in-One Video Gallery among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118783 CVE record

CVSS 6.8 Medium

All-in-One Video Gallery < 5.0.0 - Contributor+ Stored XSS via Shortcode Attribute
- All-in-One Video Gallery
- Cross-site scripting (XSS)
Not analysed yet 4 Nov 2026
CVE-2026-118629 CVE record

CVSS 5.3 Medium

All-in-One Video Gallery < 5.0.0 - Unauthenticated Private and Draft Video Disclosure
- All-in-One Video Gallery
- Information disclosure
Not analysed yet 31 Oct 2026
CVE-2026-19075 CVE record

CVSS 5.0 Medium

All-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' Parameter
- All-in-One Video Gallery
- Server-side request forgery (SSRF)
Not analysed yet 10 Aug 2026
CVE-2021-24970 CVE record

All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion
- All-in-One Video Gallery
- Path traversal
Not analysed yet 13 Dec 2021