agentprime: plugins360-all-in-one-video-galleryEvery new CVE for plugins360-all-in-one-video-gallery.https://agentprime.io/CVE-2026-12123: All-in-One Video Gallery <= 4.8.5 - Authenticated (Subscriber+) Server-Side Request Forgery via 'vdl' Parameterhttps://agentprime.io/advisories/CVE-2026-12123/https://agentprime.io/advisories/CVE-2026-12123/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 05:34:04 GMTCVECVE-2026-1706: All-in-One Video Gallery <= 4.7.1 - Reflected Cross-Site Scripting via 'vi' Parameterhttps://agentprime.io/advisories/CVE-2026-1706/https://agentprime.io/advisories/CVE-2026-1706/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 09:24:30 GMTCVECVE-2025-15516: All-in-One Video Gallery 4.1.0 - 4.6.4 - Missing Authorization to Authenticated (Subscriber+) Limited User Meta Updatehttps://agentprime.io/advisories/CVE-2025-15516/https://agentprime.io/advisories/CVE-2025-15516/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 24 Jan 2026 08:26:33 GMTCVECVE-2025-14947: All-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletionhttps://agentprime.io/advisories/CVE-2025-14947/https://agentprime.io/advisories/CVE-2025-14947/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Jan 2026 17:26:06 GMTCVECVE-2025-12957: All-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypasshttps://agentprime.io/advisories/CVE-2025-12957/https://agentprime.io/advisories/CVE-2025-12957/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Jan 2026 04:44:35 GMTCVECVE-2025-12966: All-in-One Video Gallery 4.5.4 - 4.5.7 – Authenticated (Author+) Arbitrary File Upload via Import ZIPhttps://agentprime.io/advisories/CVE-2025-12966/https://agentprime.io/advisories/CVE-2025-12966/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 06 Dec 2025 09:25:57 GMTCVECVE-2024-6629: All-in-One Video Gallery <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcodehttps://agentprime.io/advisories/CVE-2024-6629/https://agentprime.io/advisories/CVE-2024-6629/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jul 2024 06:42:23 GMTCVECVE-2024-4670: All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcodehttps://agentprime.io/advisories/CVE-2024-4670/https://agentprime.io/advisories/CVE-2024-4670/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 May 2024 12:46:20 GMTCVECVE-2024-4033: All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured imagehttps://agentprime.io/advisories/CVE-2024-4033/https://agentprime.io/advisories/CVE-2024-4033/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:46 GMTCVECVE-2022-2633: plugins360 All-in-One Video Gallery: The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file…https://agentprime.io/advisories/CVE-2022-2633/https://agentprime.io/advisories/CVE-2022-2633/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.36 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Sep 2022 17:18:59 GMTCVEcritical