Video Gallery – YouTube Gallery, Playlist & Video Grid

Güvenlik açıkları

• CVE-2023-40558

  WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2025-54731

  WordPress YouTube Showcase Plugin <= 3.5.1 - PHP Object Injection Vulnerability

  Yüksek 8.1

• CVE-2025-8420

  Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution

  Yüksek 8.1

• CVE-2026-12923

  Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter

  Yüksek 7.5

• CVE-2025-15636

  WordPress YouTube Showcase plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-15790

  Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode

  Orta 6.4

• CVE-2024-3268

  YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creation

  Orta 5.3