Extension WordPress
Vulnérabilités Video Gallery – YouTube Gallery, Playlist & Video Grid
Cette page rassemble les failles publiées pour Video Gallery – YouTube Gallery, Playlist & Video Grid, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Video Gallery – YouTube Gallery, Playlist & Video Grid
7 fiches
Video Gallery <= 4.0.3 – Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter
The Youtube Showcase plugin for WordPress is vulnerable to Arbitrary Function Call in versions up to and including 4.0.3. This is due to insufficient validation of the 'path' parameter in the emd_delete_file() AJAX handler in includes/common-functions.php. The user-supplied…
*-4.0.3
4.0.4
30/06/2026
Video Gallery – YouTube Gallery & Responsive Video Playlist <= 3.5.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Video Gallery – YouTube Gallery & Responsive Video Playlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.5.1 due to insufficient input sanitization and output escaping. This makes it possible…
*-3.5.1
3.5.2
15/04/2026
Multiple Plugins by eMarket Design <= Various Versions – Authenticated (Contributor+) Stored Cross-Site Scripting
Multiple plugins for WordPress by by eMarket Design are vulnerable to Stored Cross-Site Scripting in various versions due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to…
*-3.5.0
3.5.1
23/09/2025
YouTube Showcase <= 3.5.1 – Unauthenticated PHP Object Injection
The YouTube Showcase plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.5.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known…
*-3.5.1
3.5.2
25/08/2025
Multiple Plugins by emarket-design <= Multiple Versions – Unauthenticated Limited Remote Code Execution
Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input before using it as…
*-3.5.2
3.5.3
05/08/2025
YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 – Missing Authorization to Arbitrary Post/Page Creation
The YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the emd_form_builder_lite_submit_form function in all versions up to,…
*-3.3.6
3.4.0
20/05/2024
Video Gallery & Management <= 3.3.5 – Cross-Site Request Forgery
The Video Gallery & Management plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.5. This is due to missing nonce validation on the emd_show_forms_lite_page() function. This makes it possible for unauthenticated…
*-3.3.5
3.3.6
16/08/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.