Product by Team Plugins360
All-in-one Video Gallery
13 known vulnerabilities in All-in-one Video Gallery (Team Plugins360), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-2633 | Plugins360 All-in-One Video Gallery: Server-Side Request Forgery (SSRF) | 7.5 | |
| High | CVE-2021-24970 | All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion | 7.2 | |
| High | CVE-2024-4033 | Plugins360 All-in-One Video Gallery: Unrestricted Upload of File with Dangerous Type | 8.8 | |
| High | CVE-2025-12957 | Plugins360 All-in-One Video Gallery: Unrestricted Upload of File with Dangerous Type | 8.8 | |
| High | CVE-2025-12966 | Plugins360 All-in-One Video Gallery: Unrestricted Upload of File with Dangerous Type | 8.8 | |
| High | CVE-2024-4670 | Plugins360 All-in-One Video Gallery: PHP Remote File Inclusion | 8.8 | |
| Medium | CVE-2026-12123 | Plugins360 All-in-One Video Gallery: Server-Side Request Forgery (SSRF) | 6.4 | |
| Medium | CVE-2025-14947 | Plugins360 All-in-One Video Gallery: Missing Authorization | 6.5 | |
| Medium | CVE-2022-4974 | Freemius SDK <= 2.4.2 - Missing Authorization Checks | 6.3 | |
| Medium | CVE-2026-1706 | All-in-One Video Gallery <= 4.7.1 - Reflected Cross-Site Scripting via 'vi' Parameter | 6.1 | |
| Medium | CVE-2024-6629 | Plugins360 All-in-One Video Gallery: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-15516 | Plugins360 All-in-One Video Gallery: Missing Authorization | 4.3 | |
| High | CVE-2024-31248 | WordPress All-in-One Video Gallery plugin <= 3.5.2 - Broken Access Control vulnerability | 4.3 |