Video Gallery – YouTube Gallery, Playlist & Video Grid
youtube-showcase · plugin
Known security vulnerabilities for Video Gallery – YouTube Gallery, Playlist & Video Grid. Find out in seconds which version runs on your site with WP Lens.
7 known vulnerabilities
latest Aug 16, 2026
Vulnerabilities
- High 8.8
WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)
- High 8.1
WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability
- High 8.1
Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
- High 7.5
Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter
- Medium 6.5
WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability
- Medium 6.4
Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode
- Medium 5.3
YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creation