Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: totalsoft Component: Video Gallery Clear all filters
TI-2024-09499 CVE-2024-10247 · GHSA-3fv8-vq94-x7xf

YouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL Injection

Priority LOW 34

The Video Gallery – Best WordPress YouTube Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the orderby parameter in all versions up to, and including, 2.4.2 due to insufficient escaping…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00529 Published 2024-12-06 No fix listed CWE-89
TI-2024-09066 CVE-2024-9769 · GHSA-x68c-fp73-5cc2

Video Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Priority LOW 22

The Video Gallery – Best WordPress YouTube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.1 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00311 Published 2024-12-06 No fix listed CWE-79
TI-2023-24117 CVE-2023-45069 · GHSA-h2w6-c2hx-7jcf

WordPress Video Gallery – YouTube Gallery Plugin <= 2.1.3 is vulnerable to SQL Injection

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Video Gallery by Total-Soft Video Gallery – Best WordPress YouTube Gallery Plugin allows SQL Injection.This issue affe…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00681 Published 2023-11-06 No fix listed CWE-89