Threats tagged 'ghsa-3v4w-8jh3-gmw5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-120409The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before Medium2026-11-09GCVE DatabaseCVE-2026-120409 The All-in-One Video Gallery WordPress plugin versions before 5.1.1 do not verify if a video is password protected before serving it via its standalone player page and download link. This flaw allows unauthenticated users to access the media sources of videos that are intended to be password protected, including unlisted YouTube or Vimeo links and external file URLs. Report on CVE-2026-120409 Vulnerability #ghsa-3v4w-8jh3-gmw5	GCVE Database	2026-11-09

Page 1 of 1