Read the docs

totalsoft

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

totalsoft records in CISA KEV

No totalsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Video Gallery 4 records MEDIUM Event Calendar 3 records HIGH Ts Poll 2 records HIGH Responsive Poll 1 record MEDIUM

Records

4 records in Video Gallery · all components

TI-2023-24117 CVE-2023-45069 · GHSA-h2w6-c2hx-7jcf

WordPress Video Gallery – YouTube Gallery Plugin <= 2.1.3 is vulnerable to SQL Injection

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Video Gallery by Total-Soft Video Gallery – Best WordPress YouTube Gallery Plugin allows SQL Injection.This issue affe…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00681 Published 2023-11-06 No fix listed CWE-89
TI-2024-09499 CVE-2024-10247 · GHSA-3fv8-vq94-x7xf

YouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection

Priority LOW 34

The Video Gallery – Best WordPress YouTube Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the orderby parameter in all versions up to, and including, 2.4.2 due to insufficient escaping…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00529 Published 2024-12-06 No fix listed CWE-89
TI-2024-09066 CVE-2024-9769 · GHSA-x68c-fp73-5cc2

Video Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Priority LOW 22

The Video Gallery – Best WordPress YouTube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.1 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00311 Published 2024-12-06 No fix listed CWE-79
Open these records in search →