Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin All-in-One Video Gallery Multiple Vulnerabilities - CVE-2022-2633 - Vulnerability Database
WP Plugin All In One Video Gallery

WordPress Plugin All-in-One Video Gallery Multiple Vulnerabilities - CVE-2022-2633

High
Reference: CVE-2022-2633
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-2633
Title: WordPress Plugin All-in-One Video Gallery Multiple Vulnerabilities
Overview:

WordPress Plugin All-in-One Video Gallery is prone to multiple vulnerabilities including arbitrary file download and server-side request forgery vulnerabilities. Exploiting these issues may allow an attacker to gain access to sensitive information which may aid in launching further attacks or to make the vulnerable server perform port scanning of hosts in internal or external networks other attacks are also possible. WordPress Plugin All-in-One Video Gallery versions 2.5.8 - 2.6.0 are vulnerable.