Vendor

    Team Plugins360

    17 known vulnerabilities in products by Team Plugins360, 0 of them actively exploited (CISA KEV).

    Key figures

    17

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Team Plugins360
    HighCVE-2022-2633

    Plugins360 All-in-One Video Gallery: Server-Side Request Forgery (SSRF)

    		7.5
    HighCVE-2021-24970

    All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion

    		7.2
    HighCVE-2024-4033

    Plugins360 All-in-One Video Gallery: Unrestricted Upload of File with Dangerous Type

    		8.8
    HighCVE-2025-12957

    Plugins360 All-in-One Video Gallery: Unrestricted Upload of File with Dangerous Type

    		8.8
    HighCVE-2025-12966

    Plugins360 All-in-One Video Gallery: Unrestricted Upload of File with Dangerous Type

    		8.8
    HighCVE-2024-4670

    Plugins360 All-in-One Video Gallery: PHP Remote File Inclusion

    		8.8
    MediumCVE-2026-116545

    Cross-site Scripting (CVE-2026-116545)

    		6.4
    MediumCVE-2026-109209

    Cross-site Scripting (CVE-2026-109209)

    		6.4
    MediumCVE-2026-109974

    Cross-site Scripting (CVE-2026-109974)

    		6.4
    MediumCVE-2026-12123

    Plugins360 All-in-One Video Gallery: Server-Side Request Forgery (SSRF)

    		6.4
    MediumCVE-2025-14947

    Plugins360 All-in-One Video Gallery: Missing Authorization

    		6.5
    MediumCVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    also in 154 other products

    		6.3
    MediumCVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    also in 75 other products

    		6.1
    MediumCVE-2026-1706

    All-in-One Video Gallery <= 4.7.1 - Reflected Cross-Site Scripting via 'vi' Parameter

    		6.1
    MediumCVE-2024-6629

    Plugins360 All-in-One Video Gallery: Cross-site Scripting

    		6.4
    MediumCVE-2025-15516

    Plugins360 All-in-One Video Gallery: Missing Authorization

    		4.3
    HighCVE-2024-31248

    WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability

    		4.3

    Products

    Products by Team Plugins360
    All-in-one Video Gallery150
    All-in-one Video Gallery – Video Player & Galleries For Youtube, Vimeo & Self-hosted Videos30